Remove 2003 Remove Application Remove Risk Management
article thumbnail

What Is GRC? Governance, Risk, and Compliance Explained

BMC

GRC as an acronym stands for governance , risk , and compliance , but the term GRC means much more than that. The OCEG (formerly known as “Open Compliance and Ethics Group”) states that the term GRC was first referenced as early as 2003, but was mentioned in a peer reviewed paper by their co-founder in 2007.

article thumbnail

Statutory Cyber Incident Reporting in the USA

Plan B Consulting

The first state to have this type of law was California in 2003 and all states have, on the whole, followed the basic tenets of their law. I haven’t seen anything which covers any penalties for failure to report an applicable cyber incident. Securities and Exchange Commission (SEC) Proposed Rules.

Banking 40
article thumbnail

What Is GRC? Governance, Risk, and Compliance Explained

BMC

GRC as an acronym stands for governance , risk , and compliance , but the term GRC means much more than that. The OCEG (formerly known as “Open Compliance and Ethics Group”) states that the term GRC was first referenced as early as 2003, but was mentioned in a peer reviewed paper by their co-founder in 2007.