Risk & policy management

摘要

As I commented in my opener this month, the tools that we are reviewing are a group of very sophisticated, many-faceted products. Broadly, they fit into the category of governance, risk and compliance (GRC), but they are a lot more and, perhaps, a bit less. Confused? Don't be. It's really quite simple to discuss, though not quite as simple to do. Governance is the overarching description of the policies and directions of an organization from the top. Directors, CEOs, presidents and CIOs, for example, are involved in setting the standards for governance within the organization.