Compliance programs are designed to prevent and address corporate risk, however it is common for companies to spend their compliance dollars without fully understanding where the money
is going and what purpose it is actually serving. In addition to confusing compliance risk assessment with a general corporatewide risk assessment, many organizations are uncertain as to
the scope, frequency, and structure of such an assessment. By engaging in an compliance risk assessment, an organization is able to analyze the effect risks have on the organization, prioritize these risks, and develop options and actions to reduce the threat they pose. This in-depth workshop will help you navigate through complex regulatory compliance initiatives and functions through
industry best practices.

In many ways IT functions are the driving force behind a coordinated GRC process. For many organizations IT plays a support role for different
business units and exists in silos separated by department: compliance, audit, risk, finance, etc. Within a coordinated IT GRC effort an organization is able to link these IT processes across the overarching control framework leading to a streamlined process of governance and control. This interactive workshop will work with attendees to define the many functions of an IT GRC process, and discuss the implementation process.