Category Archives: GRC Technology Implementation

Don’t Let Your Big Data Be a Big Mess

The amount of data we are exposed to, both professionally and personally, is expanding wildly, all while the amount of investment necessary to store this data diminishes. Since storing information is so cheap now, there’s no real disincentive to avoid becoming “data hoarders.” While data hoarding has a lot fewer health risks than knick-knack hoarding, if you don’t manage your inbound data well, you can end up equally overwhelmed and paralyzed when you realize the mess you’ve made. Continue reading

Posted in GRC, GRC Technology Implementation, Risk Management | Tagged | Leave a comment

Enhance Your GRC Projects with New Perspectives

Recently, I had the opportunity to gain some new perspectives and completely change surroundings. Not only did I transition to a new client, but I made a geographical move across the country. New office, new client coworkers, new breakfast and lunch locales – even a new time zone! I’ve traded in all of my routines for a fresh start, and to be honest, I couldn’t be happier. I’ve learned a variety of new things about myself that I would not have been able to do had I stayed in my old surroundings.

When in the middle of a GRC technology implementation, it’s easy to lose sight of the big picture. While we spend time checking off the business requirements, if we’re not careful we may be solving for trivial problems and missing a chance to add real value to the organization. If not written well, requirements documents become just a “wish list” of levers, dials and knobs aimed at simplifying existing aspects of the overall process. The core process is never questioned; the job of the new system is just to “clean it up” or “make it smoother.” Continue reading

Posted in GRC, GRC Consulting, GRC Technology Implementation | Tagged | Leave a comment

Sustaining Your GRC Program, After the Fireworks are Over

Firework shows are the ultimate front-loaded project; the type where it’s easy to lose sight of the long-term relationship. For two summers in my early twenties, I was a “Licensed Pyrotechnic Operator” by the Missouri Division of Fire Safety (which, if you know me, is like asking your cat to clean the swimming pool). My job description involved trekking to a variety of rural, hole-in-the-wall communities and assisting a team with blowing up a pre-determined number of explosives, without losing any appendages. After 12 hours of work in the hot sun, the day would end with a brilliant display of color and spectacle. For many teams, the end of the show was their queue to haphazardly tear down the tubes (the launching mechanisms for the fireworks) and get the heck out of Dodge (or Thayer, West Plains, Monett, etc.), all the while high-fiving each other and talking about the great event they just created. I was lucky enough to be assigned to a team that knew better, though. To be a successful fireworks operator, it’s not just about the show.

Sustainability in the fireworks business is about the complete relationship. The person signing the check is typically a city council member or the chair of an oversight committee. The last impression of this stakeholder isn’t the show, but the conditions that are left behind after the show. Was the area cleaned up appropriately? Was trash left behind? Was the team professional and on time? Small town leaders talk; one bad impression can lead to a lack of business, both this summer and beyond. Continue reading

Posted in GRC, GRC Consulting, GRC Technology Implementation | Tagged | Leave a comment

Office Space and the GRC Space

Most of us firmly entrenched in office/cubicle/workspace environments are familiar with the movie Office Space. For those that aren’t familiar with the plot, the film provides insights into the mundane life of a software engineering company, covering all the standard office clichés: the demanding boss with annoying catchphrases, cubicles, “efficiency experts” mass layoffs, printers that never do what you want them to do, themed parties (Hawaiian shirt day!), etc. Though bombing at the box office in the late 1990s, it’s now achieved cult status with its satiric take on office culture. Continue reading

Posted in GRC Consulting, GRC Technology Implementation | Tagged | 1 Comment

March Madness: Picking Your GRC Priorities

The productivity drop you felt last week can only mean that March Madness is upon us. For Americans, the last half of March means we all become sports analysts – predicting the outcome of college basketball games for teams from Spokane, Washington to Fort Meyers, Florida. Each year, my coworkers, family members and even my neighbor’s children fill out their brackets to see who can make the most accurate picks across the 63 games of the NCAA basketball tournament. (I’ve never been a fan of counting those “play-in” games). Continue reading

Posted in GRC Consulting, GRC Technology Implementation | Tagged | Leave a comment

Continuous Improvement and GRC

If you’re one of our blog’s frequent readers, hopefully you’ve come to appreciate our use of non-business illustrations to bring some clarity to the GRC world. Too often, we (as business professionals) unnecessarily complicate things with thick jargon and code words, when a simpler description would get the job done. At OrangePoint, we are big, scratch that, huge fans of using metaphors to explain the best practices regarding the architecture and development of a GRC program: Charlie Brown, Dr. Seuss, Bigfoot, and most recently, home plumbing repair. I’ll admit that I’m capable of dropping more than a few industry buzz words without even breaking a sweat, but I’m constantly working on simplifying and refining the concepts I want to convey. While I’m not sure I’ll ever arrive at a point where everything I say is instantly understood by everyone in the room, my goal is to make steady constant improvement. As the “hook” for this blog, allow me to use a few golf parallels to describe the need for continuous improvement in GRC. Continue reading

Posted in GRC Technology Implementation | Tagged | 1 Comment

You Get What You Pay For

Home ownership has long been viewed as an iconic American ideal, right up there with mom, apple pie and baseball. A little over six years ago, we bought our home here in Kansas City. It’s a bungalow (89 years young this year) with all of the nooks, crannies, quirks, flaws and endearing qualities that you would expect from a house of its age and style, and for that we love it dearly. As those of us who own (i.e. leverage) our homes know, while it’s a labor of love, there are moments where it feels like more labor than love. Take our kitchen for example. When we bought this house, we described our kitchen as “adequate and serviceable.” Nearing seven-year itch territory, we decided to give our kitchen some TLC, and we chose to begin with an appliance facelift. We started by replacing the microwave and range/oven – it’s amazing what upgrading from 1982 white and brown to stainless steel can do for your psyche! Continue reading

Posted in GRC Consulting, GRC Technology Implementation | Tagged | 4 Comments