An introduction for GRC blogging

Amit Chatterjee is the senior vice president for SAP’s Governance, Risk and Compliance (GRC) business unit.


"I wanted to start my blog with a simple fact base for us to start a common and productive dialog about what we seeing. I have been told to be brief (my blogs usually run long), I will just jump start a discussion.

1. Governance Risk and Compliance is a major concern that companies dont know about. PCOAB estimates that $638 billion is attributable to lack of GRC. On a yearly basis, that is $20k /sec. So a keynote I gave in March, cost $91 million dollars. I hope the audience took notes.

2. Everyone says the world is flat, but the reality is that governments are not flatting, but increasing their control over companies. PwC estimates 114,000 new regs since the Reagan Era just in US alone.

3. Companies are becoming "extended enterprises", and as a result, transparency across a business value network is reducing almost daily. This lack of information forces increased greater risk with a company's on-going operations. Deloitte identified that 50% of Fortune 1000 lost 20% of their shareholder value once impacted by material risk. They further estimate that 25% of companies that have a material risk never recover the shareholder value

4. Companies are starting to create GRC organizations. We are starting to see the role get created, and at times seems to be leading to political games. Risk managers, Compliance folks, Corporate Secretaries, and Security are all involved in formations of GRC, the question is who leads it.

5. Change Management occurs slowly. We are at the tipping point of companies finally wanting to institutionalize this. Software has the opportunity to make this happen."


For the complete Blog:

An introduction for GRC blogging


For some background information on SAP's GRC Vision check out:

GOVERNANCE, RISK, AND COMPLIANCE MANAGEMENT: REALIZING THE VALUE ... (PDF)




________________________________________________

>>  Back to Main Page

Gary E. Smith
SOA Governance Architect - Governing SOA in a Connected World