introduction to grcme university - a grc sphere entity

1

GRCme UniversityTM

Where GRC and Work Excellence Disciplines, Harmonize!

Introduction to The GRC SphereThe GRC Sphere™ http://www.GRCsphere.org is the leading member-based organization dedicated to Governance Risk Compliance (GRC) industry benchmarking and other good collaborative practices. Our consortium, GRCsphere.org, serves executives and GRC pro’s around the world. We’re based in the United States, but our perspective is truly global, in nature. We invite you to join us!

Our GRC benchmarking roots were established in 2009, when several of our principals delivered the first education on GRC convergence for a leading internal audit organization and standards body. Our 2 day course for their members was focused on enterprise integration and the convergence challenges associated with business / technology management while implementing and sustaining a GRC program initiative. The content differentiator that set this flagship course apart was our focus on well-documented financial performance comparisons using real-world 5 year rolling averages for a number of well-known and highly respected global corporations. The bottom line is that we provided the first strategic shareholder measurements in the form of Key Performance Indicators (KPI’s) that executives can and should be using today for any GRC program implementation, no matter what the industry might be, or the size of the firm involved.

The GRC Sphere takes our industry benchmarking for GRC to an entirely new level. Now we can help your firm to get involved with peers in an industry cluster that is attuned to your GRC priorities for industry benchmarking or any other GRC challenge. This enables your “tribe” to build your own internal GRC program measurement dashboard. By collaborating with industry peers, you can lower your costs of GRC, but more importantly, develop a deep understanding of the strategic value that a well structured and well implemented GRC program can provide, financially, as well as operationally.

The GRC Sphere is a division of RuleSphere International, Inc.

For member information: [email protected]

2

Calling All GRC ExpertsThe GRC Sphere is launching the first Industry Benchmarking Consortium for Governance Risk Compliance (GRC) domains. Our mission is clear… we are building the world’s largest consortium of GRC Experts; GRC Service Providers, GRC Product Providers, Educators, etc. We want you!

Please contact us at [email protected]

The member-based entity, The GRC Sphere, (http://www.GRCsphere.org) is unique in that GRC Sphere's Governance Execution Framework (GEF) enables consultancies and practitioners to author, brand and publish analytical and industry benchmarking models for use by the members of an industry cluster.

The data collected by consultancies can be shared across their client base while also leveraging GRC Sphere’s leading-edge federated data management architecture which is entitled, “The GRC Data Lake; An Industry-driven Crowdsourcing and Benchmarking Repository”. This global database supports our Industry Clusters with rich content that, in essence, fulfills the role of Closed-Loop Control Architecture for Value / Performance Measurement by generating and managing mission-critical GRC information in the form of “peer average” and “best-in-class” data points for GRC Best Practice Key Performance Indicators (KPI’s).

We want you! Please contact us at [email protected] 3

GRCme UniversityOrganizational Overview

Come for our robust industry content;Stay for our awesome communities!

Core Competencies

•Governance Risk Compliance (GRC)

•Work Excellence (WE)

•Value / Performance Analytics

Copyright 2017 – The GRC Sphere – All Rights Reserved 5

Industry Crowdsourcing & Benchmarking

GRCme University Infrastructure

3 Education Delivery Platforms:

1. “Same Time / Same Place” Live Instructor-led Courses Synchronous Mode of Learning

2. “Any Time / Any Place” Self-paced Courses Asynchronous Mode of Learning

3. BreakPoint Educational Network™ Livestreaming Web TV


Partners, Take NoteYour Educational Content…

•Delivered or Dripped out to Members

•At the price you set (i.e. Unit Credits, or Free)

•You choose the duration and format:– Small Workshop– Large Group– Certification Course– Course Series– One-on-One Coaching & Mentoring– Private or Group Consultations– Briefings Room, Ops Room, Situations Room (Web TV)


GRCme University Educational Tracks• Track 1 – Progressive GRC Programs & Value Transformations

• Track 2 – GRC Practitioner Best Practices and KPI’s

• Track 3 – Center-of-Excellence Resource Center Establish. & Leadership

• Track 4 – Technology / Business Convergence

• Track 5 – GRC Crowdsourcing, Benchmarking and Industry Research

• Track 6 – Progressive Methods and Emerging Value Parameters

• Track 7 – GRC Support Ecosystem, Tenders and e-Commerce

• Track 8 – Country and Territory-specific Legislation, Laws and Statutes

• Track 9 – Industry-specific Legislation, Laws, Statutes and Standards

• Track 10 – Role-specific Curricula Paths


Certification Curricula Table of Contents

• Sector-specific Quality Management Curricula

• Health, Safety & Environment Curricula

• IT & Service Management Curricula

• Security

• Risk and Management

• Work Excellence

• Miscellaneous9

Curricula Table of Contents• Sector-specific Quality Management Curricula

– 8 Certifications

• Health, Safety & Environment Curricula– 5 Certifications

• IT & Service Management Curricula– 6 Certifications

• Security– 12 Certifications

• Risk and Management– 5 Certifications

• Work Excellence– 7 Certifications

• Miscellaneous– 4 Certifications

10

Curricula Structure


Course Type Who Should Attend? What Will I Learn? How Long?

1.Introduction Novices Overview 1 Day

2.Foundation Novices – Intermediates Understand Best Practices 2 Days

3.Manager Intermediates – Advanced Master principals 3 Days

4.Lead Manager Prospective managers Refinement of processes 5 Days

5.Lead Implementer Champions of the Enforcement of the system 5 Days Management system parameters and audit requirements

6. Lead Auditor Auditors How to audit the mgmt. system. 5 Days

Sector-Specific Quality Management Curricula

• ISO 9001 Quality Management Systems*

• ISO 13053 Six Sigma

• ISO/TS 29001 Petroleum, Petrochemical and Natural Gas Industries

• ISO 39001 Road Traffic Safety

• ISO 16949 Automotive Quality Management

• ISO 50001 Energy Management

• ISO 13485 Medical Devices

• ISO/IEC 17025 Testing & Calibration Laboratories


Health, Safety &Environmental-Specific Curricula

• ISO 14001 Environmental Management Systems*

• ISO 22000 Food Safety

• OHSAS 18000 Occupational Health & Safety*

• ISO 26000 Social Responsibility

• ISO 20121 Event Sustainability


Information Technology &Service Management Curricula

• ISO / IEC 20000 Information Technology*

• ISO 28000 Supply Chain Security Management

• ISO 22301 Business Continuity*

• Disaster Recovery

• ISO / IEC 37500 Outsourcing

• Lead Security Incident Manager


Security Curricula

• ISO / IEC 27001 Information Security*

• ISO / IEC 27002 Information Security Controls

• ISO / IEC 27005 Risk Assessment & Optimal Risk Management*

• ISO / IEC 27034 Application Security

• Lead Privacy Implementer

• Lead Forensics Manager


Security Curricula 2

• Lead SCADA Security Professional

• Lead Pen Test Professional

• Risk Assessment Methods

• Risk Assessment using OCTAVE Method

• Risk Assessment using EBIOS Method

• Risk Assessment using MEHARI Method


Risk and Management Curricula

• ISO 31000 – Risk Management*

• ISO 55001 – Asset Management

• ISO 21500 – Project Management

• ISO / IEC 38500 – IT Corporate Governance

• ISO 30301 – Management System for Records


Work Excellence Curricula


Business Analysis

Collaborative Development & Self-Empowered Teams

Information Technology (IT) Operations

Process Improvement & Management

Project Management

Risk Management

Sales and Marketing Curricula

Miscellaneous Curricula


COBIT 5 Foundation Certificate

COBIT 5 Assessor Certificate

COBIT 5 Implementer Certificate

Implementing NIST Cybersecurity Framework using COBIT 5 Certificate

Distance Learning MBA’s

MBA and Graduate Certificate studies with specializations on the fundamental and prosperous fields of:

– Business Continuity Management

– Information Security Management

– Information Technology Service Management

– Quality Management

– Risk Management


www.GRCsphere.org

www.GRCsphere.org

Industry Benchmarking for GRC

Contact Information

Member Support: Phil Wilson

E-Mail: [email protected], [email protected]

Phone: 1(978)456-8253

Member Web Site: www.GRCsphere.org

25