IIA-Australia White Paper – GORC – New and improved GRC with added O

The term GRC creates a risk-centric bias by focusing on risk management, risk control and risk governance.
The term GRC can create confusion and bias, increasing the possibility of decision-making errors. The term GRC should be updated to describe the totality more accurately. By including Obligations in the GRC acronym (by changing it to GORC where the O stands for Obligational awareness), risk centric bias is eliminated by recognising the equal and parallel importance of obligations.

IIA-Australia White Paper – The ORC Model for Compliance Management

By applying the ORC model, Internal Audit will have a foundational structure similar to a financial chart of accounts; that is, a digestible breakdown of all of the organisation’s obligations broken down into subcategories. This foundation will provide the basis for further tools and standardised reporting.