• Risk appetite vs risk tolerance

    Risk appetite vs risk tolerance

    Risk appetite vs risk tolerance is the difference between the level of risk an organization is willing to take in pursuit of its objectives and the specific level of variation it can accept before action is needed. Risk appetite is usually broader and strategic. Risk tolerance is usually more specific, operational, and measurable. In governance,…

  • Inherent risk vs residual risk

    Inherent risk vs residual risk

    Inherent risk vs residual risk is the difference between the level of risk before controls are applied and the level of risk that remains after controls, mitigations, or other responses are in place. Inherent risk shows the starting exposure. Residual risk shows what the organization is still carrying after action has been taken. In governance,…

  • Risk matrix

    Risk matrix

    What is a risk matrix? A risk matrix is a visual tool used to assess and prioritize risks by comparing their likelihood and impact. It usually presents risk on a grid, where 1 axis shows how likely a risk is to happen and the other shows how serious the impact would be if it did.…

  • Spotlight on Women in GRC: What US healthcare compliance teaches us about modern GRC

    Spotlight on Women in GRC: What US healthcare compliance teaches us about modern GRC

    Debbie Nemeth on managing healthcare compliance across 50 states, governing AI where the consequences can affect patient care, and reporting compliance in language business leaders will act on. In the latest Spotlight on Women in GRC podcast, host Lucy Montague speaks with Debbie, the series’ first American guest, about what US healthcare compliance can teach…

  • CoreStream GRC 3.7 Release Notes

    CoreStream GRC 3.7 Release Notes

    1.0      Document purpose This document provides a summary of the highlights of the CoreStream GRC Release 3.7. Major Platform releases are finalized every 2-3 months depending on client and strategic priorities. These release notes are part of CoreStream GRC’s approach to keeping clients and partners informed of the improvements we are delivering. This document summarizes…

  • Enterprise Risk Management software RFP template: questions and scoring  

    Enterprise Risk Management software RFP template: questions and scoring  

    Enter your details and we’ll email you the Enterprise Risk RFP template: Why do organizations invest in Enterprise Risk Management software?  Despite increasing regulatory pressure and growing organizational complexity, many businesses still rely on manual processes to manage enterprise risk.  Sticking to manual processes, often results in:  A risk register isn’t a risk strategy.  Modern…