SEARCH

ISO 9001, 45001, 14001, etc. replaces should with shall statements adds whistleblowing and expands culture matters of regulatory compliance. provides description of what is considered a regulatory compliance culture

The challenge lies in applying GRC effectively in the midst of existing cultures, management systems Similarly, for GRC to thrive, organizations must embrace a culture of constant assessment and enhancement

Operating in the PROACTIVE COMPLIANCE ZONE creates a strong compliance culture ensuring not only compliance

discussions between accountable parties and those responsible for compliance, organizations can foster a culture the importance of obligations and the progress towards meeting them, organizations can reinforce a culture catch the ball and successfully bridge the gap between promises and actions, ultimately fostering a culture

organizational behaviour - Drives strategic decision-making and risk appetite - Sets the tone for compliance culture

Following rules requires a culture of conformance rather than a culture of improvement and proactivity

Differences in risk culture will impact the level of rigour required in subsequent steps of the process Implementation Create implementation plan (technical changes) Create transition plan (changes to behaviour, culture

Risk management needs to remain proactive and requires a culture that reinforces practices that are more Audit’s reactive culture would compete and dominate to the detriment of risk management. Probably not, for reasons that include: Different cultures: proactive versus reactive Different purpose

collaboration, compliance programs can align business objectives with compliance outcomes, fostering a culture capabilities need to be continuously enhanced: Managed Obligations Managed Promises Managed Assurance Managed Culture

Negotiating the cultural and architectural differences between compliance and IT is critical for compliance

privacy, and other domains Root cause analysis examining motivations behind deliberate circumvention Cultural create cascading risks Creating genuine safe channels for reporting concerns about misconduct Building a Culture

As a result, compliance remains mostly a world of disparate silos, competing cultures, inefficient processes