required to fulfill them Track promise-makers and promise-keepers—who commits versus who delivers (RACI Model

guideline can be easily combined with existing management systems to provide an overall governance model

We have used this model in the past and in some cases it still make sense to do so.

Policies, training modules, and basic monitoring catch honest mistakes but miss deliberate evasion. in creating environments where: Compliance serves as a strategic asset, not a necessary evil Leaders model

Training requirements for large models double approximately every few months, creating an unsustainable

Introducing frameworks such as the OCEG model may inadvertently burden management teams resulting in

This resulted in the formulation of: A regulatory classification model An obligation taxonomy The Compliance Value Chain The Proactive Certainty Model™ The 10 Rules for Effective Compliance A proactive accountability management framework A proactive model for governance risk and compliance (GRC) Strategies to apply help describe behaviors, relationships, and elements as we worked towards a comprehensive operational model has been instrumental by providing valuable feedback which we have used to improve the utility of our models

following diagram illustrates how a compliance chain can be constructed using Porter's value chain as a model

Each level in his model exists because there is a qualitatively different kind of work to be done — work

Risk management demands horizon scanning, scenario modelling, and proactive deployment of countermeasures

The causality model chosen to describe a system often leads to specific methods and tools to address This may create blind spots when the causality model does not adequately reflect reality.  Make sure that your continuous improvement programs improve system models as well as processes.

Problems, issues, and gaps are not failures in this model.