Chapter 2. Governance Today

by Jacob Lamm

The recent emergence of governance, risk, and compliance (GRC) initiatives in organizations throughout the world has generated a lot of market buzz and interest among analysts and executives alike. In such an environment, there may be some confusion about the terms governance, risk, and compliance, and how they differ from each other. Many organizations manage compliance on a regulation-by-regulation basis, or as separate projects across departments. They fail to take advantage of synergies that exist across these compliance projects. Similarly, risk is often managed as a totally separate initiative, with relatively little connection or unification with the corporate compliance program. And finally, ...

Get Under Control: Governance Across the Enterprise now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.