Publications, guides, and deep-dive analyses.
A practical guide to enterprise risk management tools, including risk registers, assessment matrices, KRIs, dashboards, scenario analysis, spreadsheets, ERM software, and GRC platforms.
A practical guide to enterprise risk management services, including ERM consulting, assessments, framework design, risk appetite, controls, KRIs, reporting, technology, and managed services.
A practical guide to structuring an enterprise risk management operating model, including governance, ownership, assessment, appetite, controls, monitoring, reporting, assurance, and maturity.
A practical implementation guide to enterprise risk management frameworks, covering governance, taxonomy, assessment, appetite, treatment, monitoring, reporting, specialized risk domains, maturity, and continuous improvement.
A practical guide to evaluating enterprise risk management software, including risk registers, assessments, appetite, KRIs, aggregation, GRC integration, security, APIs, implementation and TCO.
A practical guide to COSO Control Activities, its three principles, control design, technology controls, evidence, and GRC traceability.
A practical guide to COSO Risk Assessment, its four principles, risk lifecycle, fraud risk, change, evidence, and GRC application.
A practical guide to the COSO Control Environment, its five principles, assessment evidence, and application in GRC.
Practical guide to building and operating a risk management framework, including governance, assessment, treatment, controls, GRC, ERM, AI and maturity.
