article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

Are there differences at all? Not long ago, risk managers concerned themselves mainly with hazards such as fires and floods; or in the financial sector, loan defaults (credit risk). 2002-2007): Financial reporting, Sarbanes-Oxley Act (SOX) compliance, and their related IT controls. They’re all critical, Scheitlin says.