Integrated risk management

Governance, risk & compliance

The global economic crisis proved that many businesses did not take a strategic and coordinated approach to risk management. Coming out of the crisis, organizations are pressured to be more proactive and rigorous in how they manage risks and to provide assurance to internal and external stakeholders about their risk management effectiveness. Companies that can clearly articulate and quantify the risks they face and their likely impact on performance will ultimately make better business decisions. A comprehensive Governance, Risk, and Compliance (GRC) approach, enabled by technology, can drive new compliance and performance capabilities-and new organizational resilience.

Governance, Risk, and Compliance (GRC) services help clients develop a wide-ranging vision and approach for their organizations' multiple governance, risk, and compliance processes. The key focus is to help improve the sustainability, effectiveness, efficiency, and transparency for GRC processes; align the processes with the organization's strategic goals and objectives; and drive both competitive advantage and shareholder value.

KPMG can help with…

• Strengthening the GRC organization and processes to address renewed stakeholder focus on governance and risk management
• Enhancing economic business value by helping improve cost efficiencies
• Capitalizing on opportunities and helping to minimize losses through enhanced risk management and informed decision making

In addition, KPMG's Holistic Model for GRC provides an integrated approach for developing and establishing a successful and sustainable GRC framework within the organization.

Potential benefits

A company's effective approach to GRC can help:

• Protect and enhance business value by fostering a risk-aware culture, supporting informed decision making, and addressing multiple compliance and assurance layers
• Enhance operational efficiency by rationalizing risk management, controls, and assurance structures and processes, and intelligent use of IT and data management structures
• Enable the organization to quickly, consistently, and efficiently respond to challenges provided by evolving risk profiles and rapidly changing regulatory requirements
• Enable a company to meet compliance objectives while improving performance by using an integrated framework in support of its strategic objectives