Companies That Integrate Governance, Risk and Compliance Have Greater Confidence

OCEG’s 2012 GRC Maturity Survey reveals senior executive and board belief in GRC business benefit

SCOTTSDALE, Ariz.--(BUSINESS WIRE)--OCEG’s global 2012 GRC Maturity Survey, sponsored by SAP, indicates that efforts to integrate governance, risk and compliance capabilities are on the rise and returning value in lower costs; better understanding of performance; and increased confidence in these critical business processes.

“One of the most striking findings in the survey is that fully 90% of those who have taken steps to integrate their governance, management and assurance of performance, risk and compliance have met their expectations for that change process”

“One of the most striking findings in the survey is that fully 90% of those who have taken steps to integrate their governance, management and assurance of performance, risk and compliance have met their expectations for that change process,” says OCEG President Carole Switzer, “seventeen percent say their expectations were exceeded, which is a huge number for such a complex process and I think much higher than has been seen in other broad business change efforts.”

The survey includes responses from more than 500 global participants representing a wide range of industries and companies of all sizes. More than 60% are C-suite executives or board members.

“When we compare those who say they are integrating processes for governance, risk and compliance to those who aren’t, the value becomes really clear,” says Kevin McCollom, Group Vice President, Head of Governance, Risk & Compliance Solutions for the survey sponsor, SAP.

“As was reported in the OCEG webinar on preliminary findings of the survey,” Ms. Switzer notes, “those who are integrating GRC have substantially stronger ability to identify and understand their risks, select and monitor the right controls, and have the confidence necessary to advise strategic decision-makers. These are results everyone is seeking.”

The All Respondents Report of the survey is available for free download at http://hello.oceg.org/grc-maturity-survey-2012/. A recording of the preliminary findings webinar and related slides are available on the OCEG website at http://www.oceg.org/event/2012-grc-maturity-survey-report.

Over the next several weeks, OCEG and SAP will be working with an academic team at the University of Texas, Dallas to further analyze the data and issue additional reports. For requests regarding specific survey information, contact OCEG President Carole Switzer.

ABOUT OCEG

OCEG is a nonprofit think tank dedicated to helping organizations reliably achieve their objectives, while addressing uncertainty and acting with integrity. This is what OCEG calls Principled Performance, and it is a goal that every organization can achieve by integrating and aligning their approaches to the governance, assurance and management of performance, risk and compliance. Processes for achieving that integrated approach, commonly called GRC, is supported by the open source standards set out in OCEG’s Red Book GRC Capability Model. The companion set of agreed upon procedures set out in OCEG’s GRC Assessment Tools (the Burgundy Book) provide an opportunity for self-assessment and OCEG certification of the design and operation of an organization’s entire GRC capability or aspects of it as they are matured over time. OCEG offers hundreds of resources, online and live training opportunities, and a community within which individuals can continually build their skills and organizations can collaborate. Learn more at www.oceg.org.