7.2. IT GRC Roles
To understand how IT GRC operates in large organizations, let's look at the typical roles of the IT Compliance Group and the IT Compliance Officer.
A business unit executive owns the business processes that deliver value to the organization. Similarly, IT Compliance Group is usually responsible for ensuring that the company's IT processes, procedures, and systems are in compliance with external regulatory mandates, industry requirements, and internal corporate policies. This team, often working with the Governance, Risk and Compliance (GRC) team described in Chapter 6, can advise the business unit executive about IT-related compliance issues, although they stop short of setting policy.
You need to know some terminology used ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access