Create integrated GRC dept. structure
Ensure CAE reports to CEO
Empower Audit Committee
Get Senior Management involved
Engage at Board level
Implement ERM
Put into practice a code of business ethics
Prepare & execute annual GRC plan
Educate board on strategic risks
Ensure accurate financial reporting
Continuously monitor control environment
Focus on fraud risk assessments
Tighten controls on information security
Review disaster recovery plans
Test business continuity plans
Build awareness & train staff on risk management
Ensure compliance to laws
Build control centric organization culture
Engage human resources dept. to manage people risks
Partner with business units to manage operational risks
Focus on providing assurance & value addition to CXOs
