How to Navigate Governance Risk and Compliance (GRC) Selection and Configuration—Where Do I Start?

As colleges and universities grapple with a wide array of risks, many institutions are revisiting their risk management practices and considering how to manage risk more efficiently. As college and university budgets increasingly face cost pressures, the topic of utilizing Governance, Risk, and Compliance (GRC) tools to manage risk more efficiently and effectively is becoming more pronounced. Despite knowing about GRC tools and their value, it can be a daunting endeavor to initiate, and many ask "where do I start?" Navigating the GRC implementation life cycle—from procurement to rollout—requires an understanding of requirements, careful planning, and effective project management for a successful implementation.

This session will cover considerations when gathering requirements for GRC tool selection, connections between numerous modules, and program design to build around your GRC tool. This session will also cover some of the common pitfalls institutions encounter, and the strategies utilized to navigate around those pitfalls, with a particular focus on CIO/CISO leaders who are involved in the decisions and implementation.