Learn the difference between RCSA, risk assessment, and control testing, and how Connected GRC links risks, controls, evidence, issues, remediation, and reporting.

Learn the difference between policies, procedures, and controls in GRC, and how Connected GRC links written expectations to workflows, evidence, testing, and remediation.

Learn how Entity & Corporate Governance Management works in Connected GRC by linking legal entities, boards, committees, officers, filings, obligations, policies, issues, and evidence.

Learn how internal audit management works in Connected GRC by linking audit plans, risks, controls, evidence, findings, issues, remediation, and assurance reporting.

Learn how SOC 2 compliance works in Connected GRC by linking Trust Services Criteria, controls, evidence, issues, vendors, cyber risk, privacy, and audit readiness.

Learn how regulatory inquiries work in Connected GRC by linking requests, exams, obligations, controls, evidence, approvals, issues, remediation, and response history.

Learn how regulatory change management works in Connected GRC by linking horizon scanning, obligations, impact assessments, policies, controls, evidence, issues, and reporting.

Learn how policy management works in Connected GRC by linking policies to obligations, controls, attestations, exceptions, training, issues, evidence, and reporting.

Learn how compliance assessments and testing work in Connected GRC by linking controls, evidence, obligations, issues, remediation, audit, SOC 2, SOX, and reporting.

Learn how to make Risk and Control Self-Assessment practical by connecting RCSA to risks, controls, evidence, incidents, issues, KRIs, owners, and remediation.

Learn how Enterprise Risk Management works in a Connected GRC program by linking risks, controls, RCSAs, KRIs, incidents, issues, vendors, resilience, audit, and reporting.