MLSC6500 · Law

Organizational Effectiveness: Governance, Risk Management, and Compliancy

Boston College Law School

Technical proficiency is not enough to manage business risk. Every potential or identified threat cannot be mitigated, and organizations must choose where to focus their often limited resources to support business goals. This course focuses on Governance, Risk and Compliance (GRC) as an organizational capability that all organizations require in todays complex world. Topics include understanding the business context of key stakeholders, corporate culture, and organizational risks, including the benefits and risks presented by Artificial Intelligence (AI). Students will understand how GRC capabilities such as enterprise risk management (ERM), compliance management (SOX, ISO, PCI, NIST, etc.) and policy management should work together to build a cohesive and balanced risk management strategy within the business context. Students will learn about GRC technology and GRC program management required to support and grow GRC capabilities. Lastly, students will hear from guest lecturers about the roles and responsibilities of the Board of Directors, Risk/Audit Governance Committees, Chief Executives (Chief Information Security Officer (CISO), Chief Risk Officer (CRO), Chief Security Officer (CSO), etc.) and how they rely on GRC capabilities to support the business.