HOME | SERVICES | PRODUCTS & SOLUTIONS | ABOUT KNOWCO | CLIENTS | CONTACT US

Services

GRC Architecture

Recovery & Resolution Planning

Liquidity Risk

Credit Risk

Operational Risk

Compliance

Basel III

Implementation

Training

GRC Programme Implementation

Project and Programme Management

A Governance, Risk and Compliance (‘GRC’) programme is generally not a simple project as the complex accountabilities of GRC tend to cut across functions, roles and responsibilities. It also has additional complexity that regulations are increasingly technical and require specialist knowledge.

Yet implementing a GRC programme, like any other project or programme of work, has to be managed to the objectives of time, cost and quality, and be effectively communicated.

Our project and programme managers work closely with our GRC domain experts to identify and understand the implication of relevant regulations, as part of the planning process. They are Prince II accredited practitioners and apply rigourous but proportionate project management disciplines to any assignment. This enables them to translate the regulatory requirements into effective change programmes.

Change Management

Risk management and compliance become effective when the processes are successfully embedded in the business operations and staff at all levels. This necessitates changes in the organisation and, like any Change implementation programme, will only be successful if the changes are carefully planned and managed. Our project managers are Prince II accredited.

We address change management as an integral part of any GRC compliance project. Change management efforts are customised and scaled to the characteristics of the project, and address both organisational and individual levels. Organisational change management looks at change from the managers' perspective - structure, manuals, processes and procedures - whereas at the individual level transitioning issues such as resistance and competence are addressed.

GRC Programme Components

A GRC programme is likely to include one or more of the following areas of work:

  • Gap analysis against regulations and/or policy
  • Policy review/definition
  • Process review/definition and/or mapping
  • Compliance rules definition
  • Assurance or evidencing requirements definition
  • Key Performance Indicators (KPI) definition and monitoring rules
  • Assurance system implementation

Contact us to discuss any aspect of your GRC programme