What governance and risk mitigation programs are required for your CRO strategy considering Context and Risks you identified? Explain what compliance activities should occur (if any).

You are the new Chief Risk Officer (CRO) for the Boston-based company Cengage. The company specializes in Learning Management solutions. The CEO asked you to present your strategy to minimize business risk.

You will analyze your strategy in terms of the GRC course components: Scope of Final (please first read each question in the Final so you address each question):

Understand the Context Internal, External, Culture, Stakeholders etc. Understand the Risk What are the Top 5 Risks and driver(s) for these risks? Explain why.

Describe potential impact/likelihood (heat map not required) Establish the Governance & Assess Compliance What governance would you strengthen?

What compliance activities would you implement?

GRC Technology & GRC Program Management What functionality/capabilities would you want to implement? Why?

Describe the type of information and format for executive reporting For each question, write a 4-6 paragraph analysis for each question (recommended).

Be organized and succinct (bullet points are fine) and use external references to strengthen your analysis.

You DO NOT need a Works Cited page. Use quotes and/or embedded reference sources to support your analysis.

Below are some suggested resources for your analysis to get started: Cengage Business Profile: https://www.cengage.com/ (Links to an external site.) https://www.cengage.com/investor/

Question 1: Cengage Learning Case Study: Establish the Governance & Assess Compliance What governance and risk mitigation programs are required for your CRO strategy considering Context and Risks you identified? Explain what compliance activities should occur (if any).

Question 2:Cengage Learning Case Study: GRC Technology & GRC Program Management How would you build your CRO Strategy using GRC Technology/Program Management? What data would you need? What capabilities do you require to effectively manage your strategy? What type of visibility (reporting) would you want to see to ensure you monitor your risk strategy effectively?

Last Completed Projects