Cyber Governance, Risk & Compliance

While cyber security is at the forefront of many senior executives’ minds, IT and security teams must capitalise on this opportunity by demonstrating prudent risk management measures and proactive support of business initiatives.

This may involve cyber transformation initiatives, and KPMG’s Cyber Governance, Risk & Compliance (GRC) practice is positioned to help.

Our team helps organisations to work with prominent GRC technology vendors to maximise their investments, and to integrate discreet silos of information to enable strategic decision-making.

KPMG has had a dedicated team performing GRC software implementations since 2010 – a time when the maturity of leading software vendors provided the flexibility to configure (rather than customise) their platforms to support our clients’ requirements.

In the years since, we have worked with a variety of organisations across a range of solutions, industry verticals and sizes.

Our smallest project has been for an organisation with less than 20 users, whilst our largest implementation has bees a system for a multi-national bank.

This depth and variety of experience has seen us develop and refine our own delivery methodology, which is now used for all projects to ensure consistently high quality outcomes.

Supporting our local team is a global network of likeminded professionals familiar with platform implementations of varying sizes and complexities. Our global reach covers all industry verticals, use cases and most major software vendors.

Our Cyber GRC team works alongside our network of sector and domain experts to deliver a range of services across our clients’ GRC lifecycles, including:

• GRC roadmap and strategy development
• target operating model development
• requirements definition
• vendor selection assistance
• system implementation/configuration
• GRC program/project management
• training material preparation and delivery
• organisational change management
• GRC platform health checks.