6.6. Conclusion

As we stated in the beginning of this chapter, there is no correct answer as to the best structure for the governance of risk and compliance. It depends on your company's size, sophistication, business model, risk appetite, and other factors. However, unifying the governance of risk and compliance into a single function performed by a unified team clearly has its benefits. It enables you to provide tools, taxonomy, training, and guidance in a consistent and orderly manner. It lets you partner with the business to proactively address risks, challenge your risk assessments, and help ensure there are no gaps. Perhaps most important, it facilitates a consolidated view of risks for executive management and the Board of Directors, ...

Get Under Control: Governance Across the Enterprise now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.