What Gets Measured Gets Managed.

Peter Drucker


Do you find, that you need the tools to get you started? We help to set up simple and practical tools supporting your governance, risk and compliance (GRC).


There are several enterprise level products available that could support your management practices related to Governance, Risk management and Compliance (GRC). This can include:

  • Risk management
  • Compliance
  • Incident management
  • Mitigation and response management
  • Control management
  • Exception management
  • Documentation and accountability
  • Information governance and information asset management
  • Business continuity management
  • Project governance
  • Negotiation management
  • Capability and maturity measuring and monitoring

Why some of these tools may be done simply using pen and paper, you might want to get started using templates in Words or Excel and from there be able to step up to something a bit more manageable.

Our experience tells us that most companies should start simple, to ensure that you get on top of the process before acquiring any enterprise level tools, capable of everything but for most starters, so vast, that losing yourself might start to become the problem.

Because of this we are hugely fond of simple, yet powerful tools that can be easily customise exactly for you and the current ability of your organisation.

As the organization’s ability grows, the tools will often need to change to accommodate something a bit more mature and a bit more complex. This is an important point to note, since most companies, would be looking for the one tool that can help them establish the right processes. And in this they often fail, since the process now, may not be the same as the process two years from now, or even five years.

So the question raised is which stage of the processes should be supported?

Our take on this is always to support your current level, whether we are talking risk management, project governance or something else, you should acquire tools matching your current abilities, and then be ready to step up.

This means that costs and ease of change is important, and having this in mind when choosing your initial tools, may be rather important to your success.

What are these tools, and what would I need them for?

Some of the disciplines that you may require tools for, consists of a series of sub disciplines that all may require some level of tool, depending on the maturity of your organisation.

One of these disciplines is Enterprise Risk Management (ERM),
which might require tools supporting

  • Risk assessment
  • Risk identification
  • Risk registry
  • Risk consolidation
  • Risk profiling and conversion
  • Root cause analysis
  • Risk response planning
  • Risk reporting
  • Risk dashboard
  • Incident mapping
  • Key risk indicator management
  • Control mapping
  • Information security risk assessment

Choosing correctly which tools would be relevant to your organisation, could have a big impact on your ability to reach your goals. While choosing the wrong tools could seriously disrupt your ability to deliver.

How can we help?

We can help you identify, define and set up the right tools within the fields of GRC as listed above.

We have a long experience and knowledge within these processes, and do not only know how these must work on an expert level, but also what exactly would be critical to focus on when starting out.

We can supply you with the simple tools made with Excel and Words, covering checklists, registries, assessment tools, documentation templates, reports, logs and the like, and we can supply you with some of the more expensive tools for the level above.

And if you are in deed looking for enterprise level tools, we can guide direct you in choosing these, and help you to ensure that your requirements will fit your needs.

What is the result?

With the right tools and an understanding of when to use which tool you will be able to focus on one thing: getting the job done, building experience and capability.

This is an important fact to notice. Tools will not help define your process, but once you know what you want, they can truly help you getting it done. And as you start doing the things you should, and this might be just on the basic level, you slowly start building momentum, becoming better. And only when your organisation has become sufficiently good at the basic level, should you consider building upon that.