Towards a Research Agenda for Strategic Governance, Risk and Compliance (GRC) Management

Operational Risk Management (ORM) comprises the continuous management of risks resulting from: human actions, internal processes, systems, and external events. With increasing requirements, complexity and a growing volume of risks, information systems provide benefits for integrating risk management activities and optimizing performance. Business Performance Management (BPM) technologies are believed to provide a solution for effective Operational Risk Management by offering several combined technologies including: work flow, data warehousing, (advanced) analytics, reporting and dashboards. BPM technologies can be integrated with an organization's Planning & Control cycle and related to strategic objectives. This manuscript aims to show how ORM can benefit from BPM technologies via the development and practical validation of a new maturity model. The B4ORM maturity model was developed following the Design Science Research approach. The maturity model relates specific maturity levels of ORM processes with BPM technologies applicable for a specific maturity stage. There appears to be a strong relationship (0.78) with ORM process maturity and supporting BPM technologies. The B4ORM maturity model as described in this manuscript provides an ideal path of BPM technologies related to six distinctive stages of ORM, leading towards technologies suitable for continuous improvement of ORM processes and organization-wide integration.

show abstract

“…Information technologies as an enabler for GRC to increase compliance procedures and concurrently reducing costs [40].…”

Section: Role Of Information Technologymentioning

confidence: 99%

Improving Operational Risk Management Using Business Performance Management Technologies

Weeserik

Spruit

2018

Sustainability

View full text Add to dashboard Cite

show abstract

“…Nissen and Marekfia (2013) in their paper they set a foundation for the future researchers as they focus on listing the areas that should be further investigated in the field of GRC systems management. Our study considered the research directions presented in the Data-Centered Conceptual Reference Model for Strategic GRC-Management (Nissen & Marekfia, 2014) coupled with the existing frameworks for GRC IS (Spanaki & Papazafeiropoulou, 2013) and developed a framework for the implementation of the GRC.…”

Section: Prior Research On Grcmentioning

confidence: 99%

“…The study of Nissen and Marekfia (2013) about the GRC management introduces the strategic GRC management requirements and suggests a research agenda for the GRC area. Nissen and Marekfia (2013) in their paper they set a foundation for the future researchers as they focus on listing the areas that should be further investigated in the field of GRC systems management.…”

Section: Prior Research On Grcmentioning

confidence: 99%

The Implementation of Governance, Risk, and Compliance IS: Adoption Lifecycle and Enterprise Value

Spanaki

Papazafeiropoulou

2016

Information Systems Management

View full text Add to dashboard Cite

Governance, Risk and Compliance (GRC) has become an emerging field within the IS academic community. Motivated by this research direction, the study capitalizes on the theoretical background of Enterprise Systems (ES) and extends the focus on GRC systems' implementation (enterprise value and lifecycle). Building upon expert views on GRC IS implementation projects, the analysis indicates that the three value drivers of integration; optimization and information should be considered throughout the whole GRC IS implementation lifecycle.

show abstract

“…Therefore, since understanding is not constantly consistent, applying SI GRC is only feasible to use a scientific approach [36]. The main factor that causes the failure of the SI GRC implementation is the lack of alignment between the business, and the IS developed [7], [13], [28], [34], [37]- [39].…”

Section: B Practical Implicationmentioning

confidence: 99%

Analysis of the Implementation GRC Information System in Supporting Performance Optimization

Adisuria

Jayadi

2023

JOISM

View full text Add to dashboard Cite

The Integrated Governance and Compliance Risk Information System (SIGRC) is critical in helping institutions achieve their goals and deal with uncertainty. An Indonesian Government Agency (IGA) has used SIGRC for years. However, its utilization is still unknown. This research studies the impact of acceptance and utilization of SIGRC using Delone McLean and Unified Technology Acceptance and Use Technology. The conclusion is that the relationship between use and net benefits is unaffected. User intention on use, performance expectations on user intention, use on user satisfaction, and user satisfaction on the net benefit of SIGRC benefits are five factors that influence user satisfaction. While the expectation of use intention (ITU). Information quality with ITU. Quality of service with the use of ITU. Service quality with user satisfaction, system quality with ITU, and system quality with user satisfaction all have an influence but are not significant. This research is expected as a guideline for others to evaluate the effectiveness of SIGRC's performance. Keywords: GRC Software, Delone & Mclean, UTAUT, Decision Support System, Evaluation Information System

show abstract

Towards a Research Agenda for Strategic Governance, Risk and Compliance (GRC) Management

Cited by 9 publications

References 19 publications

Improving Operational Risk Management Using Business Performance Management Technologies

Improving Operational Risk Management Using Business Performance Management Technologies

The Implementation of Governance, Risk, and Compliance IS: Adoption Lifecycle and Enterprise Value

Analysis of the Implementation GRC Information System in Supporting Performance Optimization

Contact Info

Product

Resources

About