SFIA View: Governance, risk and compliance
Governance, risk and compliance
Governance GOVN
Defining and operating frameworks for decision-making, risk management, stakeholder relationships and compliance with organisational and regulatory obligations.
Risk management BURM
Planning and implementing processes for managing risk across the enterprise, aligned with organisational strategy and governance frameworks.
Audit AUDT
Delivering independent, risk-based assessments of the effectiveness of processes, the controls and the compliance environment of an organisation.
Information systems coordination ISCO
Coordinating information and technology strategies where the adoption of a common approach would benefit the organisation.
Quality management QUMG
Defining and operating a management framework of processes and working practices to deliver the organisation's quality objectives.
Quality assurance QUAS
Assuring, through ongoing and periodic assessments and reviews, that the organisation’s quality objectives are being met.