“The principals of good IT governance, risk management, and compliance are the principals of good management” according to Scott Crawford, research director at Enterprise Management Associates. Research by the IT Policy Group serves as corroboration: organizations with good IT GRC have 17 percent higher revenues, 14 percent higher profits, and 18 percent higher customer satisfaction rates. They also spend 50 percent less on regulatory compliance annually.
Three-legged stool
For “Turning Risks into Returns: How IT Governance, Risk Management, and Compliance Drive Business Results,” CIO Digest spoke with Scott Crawford, the research director at Enterprise Management Associates, who explains that ITIL’s three-legged stool—people, processes, and technology—form the basis for successful IT GRC.
Core elements of good IT GRC...