1. Integrated GRC - Infuse GRC at Every Level
AMR Research‘s governance, risk and compliance (GRC) maturity model
Step 4:
Orchestrating
Manage in Unison
Set enterprise objectives
Coordinate analysis and action
Complete visibility to risk, exposure, performance
Step 3:
Collaborating
Coordination
Identify risks
Assess exposure
Prioritizing actions
Reuse technology components for multiple purposes
Step 2:
Anticipating
Acceptance
Efficiency
Automation
See connections between multiple programs
Plan future approach
Step 1:
Reacting
Panic
Get it done!
Operate in isolation
Marshal resources as necessary from wherever
Give credit to AMR
Let’s take a look at the journey many organization are facing - Walk through AMR’s maturity model - Of course, each organization is in its own unique situation. It therefore charts its own GRC course to meet its business requirements. But, it will generally move through four phases to reach GRC maturity.
<click> brings spotlight to first phase
<click> brings spotlight to 2nd phase and overlays our products for that phase
<click> brings spotlight to 3rd phase
<click> last phase
Tactical
Maturity varies by industry / geography
Strategic
Source: AMR Research, 2006

2. Integrated GRC - Infuse GRC at every level
AMR Research‘s governance, risk and compliance (GRC) maturity model
GRC Repository
Corporate Social Responsibility
Step 4:
Orchestrating
Manage in Unison
Set enterprise objectives
Coordinate analysis and action
Complete visibility to risk, exposure, performance
Risk Management
Industry Specific GRC
Environmental
Step 3:
Collaborating
Coordination
Identify risks
Assess exposure
Prioritizing actions
Reuse technology components for multiple purposes
GRC Repository
Corporate Social Responsibility
Access Controls
Global Trade Services
Process Controls
Step 2:
Anticipating
Acceptance
Efficiency
Automation
See connections between multiple programs
Plan future approach
Risk Management
Industry Specific GRC
Environmental
Excel Spreadsheet
Documentation of Controls
Step 1:
Reacting
Panic
Get it done!
Operate in isolation
Marshal resources as necessary from wherever
Access Controls
Global Trade Services
Process Controls
Excel Spreadsheet
Documentation of Controls
Give credit to AMR
Let’s take a look at the journey many organization are facing - Walk through AMR’s maturity model - Of course, each organization is in its own unique situation. It therefore charts its own GRC course to meet its business requirements. But, it will generally move through four phases to reach GRC maturity.
<click> brings spotlight to first phase
<click> brings spotlight to 2nd phase and overlays our products for that phase
<click> brings spotlight to 3rd phase
<click> last phase
Tactical
Maturity varies by industry / geography
Strategic
Source: AMR Research, 2006