Mastering GRC

Lawyers shape critical decisions about governance, risk, and compliance every day, yet many struggle to see how their work fits into the integrated framework of GRC and its contribution to achieving client objectives. In this practical guide, GRC pioneer Carole Stern Switzer leverages her unique background as both a leading law firm partner and co-founder of OCEG - the organization that created the only official GRC standard - to help lawyers navigate the evolving world of integrated GRC.Switzer maps out how lawyers can transform from traditional legal advisors into strategic GRC partners. Mastering GRC: The Lawyer's Guide to Success in Governance, Risk, and Compliance breaks down the interconnected elements of GRC, providing a clear roadmap for enhancing your impact across all three domains. Readers will uncover practical strategies for aligning legal expertise with business objectives, effectively communicating complex risks to non-legal stakeholders, and leveraging emerging technologies to improve GRC practices.This book examines GRC challenges across diverse settings, from multinational corporations to government agencies. It tackles pressing questions about balancing dual roles as legal advisors and business operators, managing ethical obligations, and building rewarding GRC-focused careers. As organizations face new challenges - from artificial intelligence to climate change - this guide equips the reader with tools to adapt and lead. Whether you are in-house counsel aiming to expand your strategic influence or external advisors seeking to better serve your clients' GRC needs, Mastering GRC: The Lawyer's Guide to Success in Governance, Risk, and Compliance provides the framework and practical guidance needed to elevate your contributions from reactive problem-solver to proactive partner in organizational success.

Carole Stern Switzer, Esq., is the cofounder of the global nonprofit think tank OCEG, joining founder Scott L. Mitchell in January 2003. The organization’s initial mission was to improve corporate compliance and ethics by developing standards, and so it was called the Open Compliance and Ethics Group. As that work began in the spring of 2003, conversations amongst the drafting committee members expanded beyond compliance and ethics—moving into performance management, risk management, governance, and assurance. The team decided that what was needed were standards for a fully integrated approach to all these organizational aspects, focusing primarily on governance, risk management, and compliance. So OCEG created the term GRC to represent these (and additional) capabilities that would ensure the integration of governance, assurance, and management of performance, risk, compliance, and ethics.Over the past 20+ years, Carole has been a leading expert in GRC, writing frequently on the topic and presenting keynote addresses at numerous events globally. She has continued to define and refine GRC concepts, authoring numerous resources published by OCEG and providing articles for many magazines and other publications.