Interpreting Organizational Needs

Every organization is unique in its own way, whether in company culture, the products or services it offers, the information technology choices that have been made throughout the company, etc. In order to be successful as a GRC professional, it’s imperative that the individual recognizes organizational differences and be prepared to operate within its unique construct.

For instance, if a business is preparing to exit a particular line of business, it wouldn’t be prudent to continue to invest heavily in the information technology that supports that line of business. That includes the security controls.

This will be a recurring theme throughout the course. Security and Security GRC professionals serve to support business objectives, and it's vital that GRC professionals understand business objectives and can communicate effectively with stakeholders throughout the organization.