Online GRC Training

Online GRC training tends to be assigned to the risk and compliance team, who need it least, and skipped for the people who make the decisions.

The decisions that create exposure are made by operational managers. Accepting a supplier without checking anything. Approving an exception to a control because a deadline is tight. Deciding an incident is too minor to report. None of those people would describe what they are doing as risk management.

Training aimed at them looks different from specialist training. It is short, built around decisions they actually face, and specific about the threshold at which something has to be escalated rather than handled locally.

The specialist course has its place. It is simply not the one that changes what happens on an ordinary Tuesday afternoon.

ASIC publishes governance guidance. This is general information rather than legal advice, and obligations vary by state and territory.

See Sentrient’s compliance training courses and GRC system.