Making GRC everyone’s business

Developing a robust governance, risk and compliance (GRC) programme is a complex task for financial companies, but embedding it in the business can be even more challenging. Following conversations with over 50 firms, Dave Marmer, vice-president of offering management at IBM GRC, reveals the primary motivations for today’s GRC professionals, the key pillars of an integrated GRC framework and the secret to engaging all three lines of defence in the process of continuous assessment.

“With the governance model, there needs to be an embracement of ‘risk as a culture’,” says Marmer. “It has to come from the top down and people really need to understand that risk is truly everybody’s business.”

Sponsored content