Which option is not a pain point when selling a Governance, Risk and Compliance solution to the identified buyers?
A. Line of business managers lack risk data and intelligence to evaluate risk exposure
B. Lack of a central repository to track risk and control self-assessments
C. No integrated reporting across risk management activities
D. Automated system to report risk exposure trends
What are the key trends that drive Governance, Risk and Compliance initiatives?
A. Regulatory oversights and risk quantification
B. Lack of visibility into risk exposure
C. Decreasing governance demands
D. Soloed risk and compliance initiatives
What is one benefit for maintaining a centralized library of laws, regulations, and best practices?
A. Harmonized compliance programs for departments and focus areas to promote a standardized and efficient compliance approach
B. Unstructured documentation and remediation of regulatory requirements
C. Non-standard compliance for all regulations to deliver a holistic understanding of all compliance risks
D. De-centralized repository for managing and synchronizing governance with multiple regulations
OpenPages GRC can be extended to address other areas of risk and compliance initiatives. What functional areas or processes could buyers benefit from when using the OpenPages GRC Platform?
A. Vendor risk management, business continuity management
B. Credit risk, liquidity risk
C. Human resources, expense reporting
D. IT governance, marketing campaigns
According to the CRO Forum with regard to Operational Risk and Solvency II, "At the heart of operational risk management is a clear understanding of the operational risk events that may occur and the strength of the company's processes and mitigation activities to prevent or respond to such events. From the list below, what should an operational risk management system encompass?
A. Risk policy, Risk appetite, Risk tolerance, Risk identification, Risk assessment, Risk monitoring and Risk mitigation
B. Risk policy, Risk appetite, Risk scaling and Risk mitigation
C. Risk policy, Risk scripting, Risk tolerance, Risk identification, Risk Assessment, Risk monitoring and Risk mitigation
D. Risk policy, Risk predictions, Risk tolerance, Risk identification, Risk Assessment, Risk monitoring and Risk mitigation
Which of the following statements is a principle of GRC convergence?
A. Requires collaboration and coordination.
B. Enables the client to assess risks many times and satisfy few.
C. Is a natural occurrence in any organization.
D. Has no impact on the culture or the organisation.
Which indicator should alert you to an OpenPages GRC opportunity?
A. Collaborate and automated systems defined by line of business managers
B. Robust reporting and non-redundant risk and controls data collection
C. Integrated, inexpensive approaches to data collection
D. Line of business managers lack risk data and reporting intelligence to evaluate risk exposure
What does the IBM OpenPages GRC Platform allows organizations to do?
A. Manage a predictive analytics framework to report to multiple regulators.
B. Manage XBRL content for Solvency II Pillar 3 requirements.
C. Manage risk and compliance across multiple regulations, including Basel II and Solvency II.
D. Manage risk and compliance across multiple regulations, excluding Basel II and Solvency II.
Which one of the following capabilities is NOT necessary for a fully scalable integrated risk and compliance management solution?
A. Document management and workflow
B. Issue remediation, integrated dashboards and dimensional reporting
C. Disparate systems and reporting
D. Surveys, assessments and key metrics
A recent International Data Corporation (IDC) Worldwatch study revealed that an average $500 million corporation is subject to at least 35 40 regulatory mandates. GRC solutions assist with managing regulatory mandates in a central library for automation and reporting. Which regulations below would a financial institution not be responsible for adhering to?
A. Basel II
B. Solvency II
C. Sarbanes-Oxley
D. Carbon Reduction Commitment