Governance Risk Management And Compliance Training

Governance risk management and compliance training aimed at boards is a different product from the operational version, and giving directors the operational course wastes everyone’s time.

Directors do not maintain registers. Their job is to test whether the people who do are doing it properly, which is a questioning skill rather than a technical one.

What that looks like in practice is a small number of questions asked consistently. What has changed in the risk profile since last meeting, and why. Which controls have been tested, and which failed. What is overdue, and who owns it. What are we not being told because it has no owner. And what would we have to have known for this incident to have been prevented.

Two hours covering those beats a full day of methodology.

Safe Work Australia sets out officer due diligence. This is general information rather than legal advice.

See Sentrient’s free GRC webinar for HR leaders and GRC system.