Sistemi di Governance, Risk e Compliance Management

WHAT CAN WE REALLY EXPECT FROM GOVERNANCE, RISK AND COMPLIANCE MANAGEMENT SYSTEMS? The concept of an integrated management of Governance, Risk and Compliance (GRC) is being paid more and more attention by companies worldwide, within several industries, as well as the related IT systems, known as “GRC systems” or “GRC softwares”. Nonetheless, the state-of-the-art still lacks a complete view on the whole potential - in terms of benefits – such GRC can provide. Stemming from the definition of what a GRC is, from what the main differences with respect to the ERM are, and from why it is usually advisable to “buy” such a software instead of “making” it, this white paper aims at providing the reader with detailed and systematic information about the key benefits from the adoption of a GRC solution. In the last section, hints about the use (or not use) of GRC systems from a set of interviews with Risk Managers of important Italian companies, are reported.