Governance, Risk & Compliance

The main reasons an organization might implement a governance, risk management and compliance (GRC) program would be to meet the requirements of a regulatory body or to mitigate the risks associated with not having a formal program in place.

According to Aberdeen group’s GRC strategic agenda the biggest anticipated problem in implementing such a program (as identified by half of their survey respondents) is the ineffective communication of policies and procedures to employees.

Corporate fraud is a very real threat to the health of your business. Fostering a culture of honesty and integrity will minimize your exposure to risk, and motivate honest employees to report any of the unethical and dishonest activity they witness or suspect. Reminding an employee about a moral code has been shown to reduce the likelihood of an ethical violation.

The fact that over half of all fraud detection tips came from employees suggested that organizations should focus on employee education as a key component of their fraud detection strategies. quote2008 Report to the Nation on Occupational Fraud and Abuse, Association of Certified Fraud Examiners (ACFE)

Protiviti's professionals have helped companies around the world meet and exceed government and shareholder expectations for governance in such areas as Sarbanes-Oxley, Foreign Corrupt Practices Act (FCPA) and Enterprise Risk Management.

Creative Options can draw upon that expertise to create engaging communications and training initiatives which will shape employee attitudes and behaviors associated with an ethical business environment.