DevonWay for GRC: One platform, full GRC coverage

DevonWay is often asked if we offer software for Governance, Risk, and Compliance (GRC). The answer is yes: DevonWay software addresses the full range of GRC functionality, all on a unified SaaS platform. In fact, DevonWay offers an ideal GRC solution that lets you implement one step at a time.

GRC crosses multiple departments and requires them to work together. According to non-profit OCEG, GRC is the “integrated collection of capabilities that enable an organization to reliably achieve objectives, address uncertainty, and act with integrity.” GRC includes a wide range of areas such as internal audit, compliance, risk, legal, finance, IT, and HR, plus lines of business, the executive management, and the board.

Governance determines and manages business processes, strategies, and the corporate mission. Risk management is concerned with identifying, characterizing, and managing risks that the company faces in pursuit of its goals, while compliance management is concerned with adherence to regulations, laws, and best practices, as well as a company’s own policies, procedures, and standards. GRC provides a framework for integrating these three components to achieve an organization’s goals.

1. Business and infrastructure – The first line, from the worker in the field to Management, is responsible for following regulations, standards, and corporate processes, including managing risks and implementing controls on a day-to-day basis.  
2. Control functions – The second line, which includes Risk, Compliance, and Legal teams, provides oversight on compliance with policies and procedures and monitors risk and adherence to control frameworks. These teams are responsible for identifying potential non-conformances or near misses and developing a mitigation plan to correct existing or prevent future occurrences, for example through process improvements, training, and incident reporting.
3. Internal audits – The third line provides an independent review and assesses the effectiveness of the first- and second-line functions with regards to compliance.  

• DevonWay Management of Change
• DevonWay Improvement Initiatives

• DevonWay Audits & Assessments for internal audits
• DevonWay Risk Management for risk assessments that include Operational, Compliance, Technology, and Vendor Risk
• DevonWay Incident Management, DevonWay Corrective & Preventive Actions, and DevonWay Accidents & Injury Reports for event and incident management

• DevonWay Compliance Management
• DevonWay Training Management
• Plus one or more of DevonWay Hazardous Waste Management, DevonWay Industrial Hygiene, and DevonWay Chemical Management

About the author