To achieve Principled Performance, an organization must monitor and conduct assurance activities for established GRC actions and controls to ensure they are utilized and are functioning properly to meet objectives. Changes to the external and internal context may demand changes in the GRC capabilities design or reconsideration of strategies and even objectives.

Developed by OCEG with contributions from MetricStream and Convercent.