How Cyber Security Can Protect Your Business - A guide for all stakeholders

CHAPTER 1: INTRODUCTION TO CYBER SECURITY GRC

Background to GRC

Governance. Risk. Compliance (or ‘Control’). Simple words – but they encompass so much. They cover the steps taken by organisations to ensure they act ethically, legally and with integrity, and can effectively and efficiently handle risks (or other uncertainties) in achieving their business goals or other objectives.

GRC was first defined by Scott Mitchell, OCEG, in 2007 as:

the integrated collection of capabilities that enable an organization to reliably achieve objectives, address uncertainty and act with integrity.²

Governance is the ability to ensure that the organisation achieves its goals and objectives. It includes policies and processes led by senior management and the board ...