Under Control: Governance Across the Enterprise

6.4. Developing a Holistic Vision of Controls Monitoring and Reporting

Thus far, we've talked about the benefits of a centralized risk and compliance function from a structure and process perspective. However, this discussion would be incomplete without a broader vision of how to effectively bring all these functions together using a common system. Organizations should think about how all of their controls, policies, and compliance regulations interact. In many cases, if a company created an inventory, it would find that it was using scores of different applications and spreadsheets, with no consistent method to integrate them to help ensure there were no gaps or to eliminate redundancies. Many companies have created a hodgepodge of controls, ...