Other Regulatory and Compliance Considerations

To finish off the chapter, we will look at some other items to consider as they relate to Regulatory and Compliance. As we’ve stated, this area of GRC can become very complex, and collaboration from other functions within the business will be needed as you look to maintain compliance with any regulations, frameworks, certifications, audits, laws, etc.

Privacy

Although we have covered privacy throughout the chapter in other sections, it is important that we directly address the need to ensure the privacy of the data we manage, store, and process is taken seriously with the utmost protection for that data.

Privacy laws and requirements to protect privacy data continue to become more stringent, and for good reason. Our data has been abused over the years and organizations have taken advantage of our data for better profit. This needs to change and the ownership of our data needs to lie in our hands and not with the organizations...