Analysing The Governance, Risk And Compliance (Grc) Implementation Process: Primary Insights
File(s)
Author(s)
Spanaki, K
Papazafeiropoulou, A
Type
Conference Paper
Abstract
Governance, Risk and Compliance (GRC) as an integrated concept has gained great interest recently
among researchers in the Information Systems (IS) field. The need for more effective and efficient
business processes in the area of financial controls drives enterprises to successfully implement GRC
systems as an overall goal when they are striving for enterprise value of their integrated systems. The
GRC implementation process is a significant parameter influencing the success of operational
performance and financial governance and supports the practices for competitive advantage within the
organisations. However, GRC literature is limited regarding the analysis of their implementation and
adoption success. Therefore, there is a need for further research and contribution in the area of GRC
systems and more specifically their implementation process. The research at hand recognizes GRC as a
fundamental business requirement and focuses on the need to analyse the implementation process of
such enterprise solutions. The research includes theoretical and empirical investigation of the GRC
implementation within an enterprise and develops a framework for the analysis of the GRC adoption.
The approach suggests that the three success factors (integration, optimisation, information) influence
the adoption of the GRC and more specifically their implementation process. The proposed framework
followed a case study approach to confirm its functionality and is evaluated through interviews with
stakeholders involved in GRC implementations. Furthermore, it can be used by the organisations when
considering the adoption of GRC solutions and can also suggest a tool for researchers to analyse and
explain further the GRC implementation process.
among researchers in the Information Systems (IS) field. The need for more effective and efficient
business processes in the area of financial controls drives enterprises to successfully implement GRC
systems as an overall goal when they are striving for enterprise value of their integrated systems. The
GRC implementation process is a significant parameter influencing the success of operational
performance and financial governance and supports the practices for competitive advantage within the
organisations. However, GRC literature is limited regarding the analysis of their implementation and
adoption success. Therefore, there is a need for further research and contribution in the area of GRC
systems and more specifically their implementation process. The research at hand recognizes GRC as a
fundamental business requirement and focuses on the need to analyse the implementation process of
such enterprise solutions. The research includes theoretical and empirical investigation of the GRC
implementation within an enterprise and develops a framework for the analysis of the GRC adoption.
The approach suggests that the three success factors (integration, optimisation, information) influence
the adoption of the GRC and more specifically their implementation process. The proposed framework
followed a case study approach to confirm its functionality and is evaluated through interviews with
stakeholders involved in GRC implementations. Furthermore, it can be used by the organisations when
considering the adoption of GRC solutions and can also suggest a tool for researchers to analyse and
explain further the GRC implementation process.
Date Issued
2013-06-23
Date Acceptance
2013-03-01
Citation
ECIS 2013 Proceedings, 2013
ISBN
978-90-393-6112-2
Journal / Book Title
ECIS 2013 Proceedings
Copyright Statement
© 2013 the Authors
Source
Proceedings of the 21st European Conference on Information Systems (ECIS 2013)
Publication Status
Published
Start Date
2015-06-02
Finish Date
2015-06-05
Coverage Spatial
Utrecht, Netherlands