Michael Rasmussen’s Post

View profile for Michael Rasmussen, graphic

GRC Analyst & Pundit at GRC 20/20 Research, LLC

Even more on #EU #Europe #GRC Market Drivers and Trends . . . There was not enough space to post the trends resulting from the drivers. So here you go . . . EU Perspectives on GRC TRENDS: Business-Driven #RiskManagement. The #ChiefRiskOfficer has more of an executive role with direct relationships to the board and other senior executives. In some cases, risk management/GRC #RFP have been driven by the board of directors. #Risk has a business focused and aligned on achieving business objectives. Many risk officers/managers get frustrated with solution providers (mainly from the #USA) that approach and message risk from an IT focus. Risk-Based Compliance. Compliance is also risk-based, aligned with objectives, and not checked checkboxes. When it comes to product and safety compliance, the EU has a prove-that-it-is-safe mentality while the USA has a prove-that-it-is-harmful mentality. Integrated Risk and #ResilienceManagement. There is a strong focus on resilience management and integrating this into risk management. This makes older traditional #businesscontinuity approaches and software obsolete and unable to deliver value to EU firms. #ESG Focused on Objectives. ESG is focused on establishing objectives and measuring performance and risk against those objectives. Solutions with a risk-centric view of ESG and not an objective-centric view do not get very far in the EU. There is a lot of focus on ESG reporting right now, and organizations are buying solutions. ESG is also very broad in the EU, while many in the USA see it as climate change. #ThirdPartyRiskManagement. Third-party risk management is a huge market that is growing in the EU and driven both by resilience (e.g., EU #DORA) and ESG (e.g., EU #CSRD, EU #CSDDD, and many country-specific requirements).

To view or add a comment, sign in

Explore topics