Back الحكم الرشيد وإدارة المخاطر والامتثال Arabic Governance, Risk & Compliance German Gouvernance, gestion des risques et conformité French ממשל, ניהול סיכונים וציות HE GRC Polish GRC Portuguese 公司治理、风险管理及合规审查 Chinese
| Part of a series on |
| Governance |
|---|
Governance, risk, and compliance (GRC) is the term covering an organization's approach across these three practices: governance, risk management, and complianceamongst other disciplines.[1][2][3][4]
The first scholarly research on GRC was published in 2007[5] by OCEG's[6] founder, Scott Mitchell, where GRC was formally defined as "the integrated collection of capabilities that enable an organization to reliably achieve objectives, address uncertainty and act with integrity" aka Principled Performance®.[7] The research referred to common "keep the company on track" activities conducted in departments such as internal audit, compliance, risk, legal, finance, IT, HR as well as the lines of business, executive suite and the board itself.
- ^ Anthony Tarantino (2008-02-25), Governance, Risk, and Compliance Handbook, ISBN 978-0-470-09589-8
- ^ Denise Vu Broady; Holly A. Roland (2008-04-25), "The ABCs of GRC", SAP GRC For Dummies, ISBN 978-0-470-33317-4
- ^ Silveira, Patrícia; Rodríguez, Carlos; Birukou, Aliaksandr; Casati, Fabio; Daniel, Florian; D’Andrea, Vincenzo; Worledge, Claire; Taheri, Zouhair (2012), "Aiding Compliance Governance in Service-Based Business Processes", Handbook of Research on Service-Oriented Systems and Non-Functional Properties (PDF), IGI Global, pp. 524–548, doi:10.4018/978-1-61350-432-1.ch022, ISBN 9781613504321, retrieved 2013-04-06
- ^ Scott L. Mitchell (2007-10-01), "GRC360: A framework to help organisations drive principled performance", International Journal of Disclosure and Governance, 4 (4): 279–296, doi:10.1057/palgrave.jdg.2050066, ISSN 1741-3591, S2CID 154869217
- ^ Scott L. Mitchell (2007-10-01), "GRC360: A framework to help organisations drive principled performance", International Journal of Disclosure and Governance, 4 (4): 279–296, doi:10.1057/palgrave.jdg.2050066, ISSN 1741-3591, S2CID 154869217
- ^ "OCEG is the ultimate source for GRC certifications and resources". OCEG. Retrieved 2025-01-19.
- ^ "What is Principled Performance®". OCEG. Retrieved 2025-01-19.