Alyned Thinking

In our lives before Alyne, we spent our days designing, implementing and reviewing security, governance and risk management solutions for companies of many sizes and industries across many different countries. We recently got to comparing notes on organisations that were highly successful in this space and others that we felt should have accomplished more and of course the companies that failed miserably.

As explained in the previous article, GRC typically is a practice of tying together governance, risk, and compliance activities in an integrated program supported by organization, processes, and tools. In some form or other, organisations of all shapes and sizes are already engaged in GRC activities. However, depending on their industry and overall size, they might have different stages of advancement.

In today’s business world depending on the industry, you will come into contact more and more with the term GRC or “Governance Risk Compliance”. In certain circles this has come to be almost a kind of new management philosophy, that fills the whole working day of entire departments. We will launch an article series on this blog examining the various facets of IT security, Risk Management practices and the governance thereof and how they are currently applied within various organisations. During this examination, we hope that the esteemed reader will be able to recognise cases, pitfalls, and successes from their own areas of influence and take some value out of this content, to apply to their future endeavors in this topic.