GRC FOCUS AREAS
DATA GOVERNANCE
Data policy development
Data quality management
Data privacy and security consulting
Data lifecycle management
INTERNAL CONTROLS
Development and implementation of internal control frameworks
Risk Control Self Assessment (RCSA)
Fraud risk assessment
Control environment evaluations
INTERNAL AUDIT
Internal audit planning and execution
Risk-based audit strategies
Compliance audits
IT audits
PROJECT MANAGEMENT
Project management frameworks
Project risk assessment
Project portfolio management consulting
Agile/Scrum project management
IT GOVERNANCE
IT governance framework development
IT risk management
IT policy and standards development
IT compliance assessments
OPERATIONAL RISK
Operational risk assessments
Business continuity planning
Process improvement consulting
Loss event data management
THIRD PARTY RISK
Third-party risk management frameworks
Vendor risk assessments & questionnaires
Contract compliance audits
Supply chain risk management
ENTERPRISE RISK
Enterprise risk management (ERM) strategy
Risk appetite framework development
Integrated risk assessments
Risk reporting and visualization
REGULATORY COMPLIANCE
Regulatory compliance assessments
Compliance program development
Training and awareness programs
Regulatory change management
FINANCIAL CRIMES
Anti-money laundering (AML) consulting
Fraud prevention and detection strategies
Case Lookbacks and Remediation
Anti-bribery and corruption laws
As companies grow, their risk-related needs expand and change. Many times, they have situations arise that require help on a incremental basis.
Our executives have a variety of backgrounds and industry expertise. We will match you with one that suits you best. This will also minimize the effort required for a complex search or lengthy interviews.
StrataGRC has several ways to provide you with executive experience without the burden of a full-time salary. Contact us today to understand how we can help.
Let a StrataGRC Risk Professional understand how we can help you. We're happy to discuss services, as well as our industry expertise and best practices.