Which one of these is most associated with a "measure of how well we are addressing opportunities"

Performance is the measure of achieving objectives. In the context of Governance, Risk, and Compliance (GRC), an opportunity is defined as the possibility of an event occurring that will positively impact the achievement of objectives. Therefore, measuring how effectively an organization capitalizes on these opportunities is a direct assessment of its performance. Successfully addressing opportunities leads to enhanced value creation and the attainment or exceeding of strategic goals, which are the core components of performance management within the OCEG framework.

A. Compliance: This refers to adhering to mandatory requirements such as laws, regulations, and internal policies. It is about meeting obligations, not measuring the successful pursuit of positive outcomes.

C. Risk: This is the effect of uncertainty on objectives, typically focusing on potential negative impacts or threats. While opportunity is the upside of uncertainty, "risk" as a measure is concerned with downside potential.

1. OCEG. (2021). GRC Capability Model, Version 3.5.

Page 13, Section 1.1, "What is GRC?": Defines GRC as the capability to "reliably achieve objectives [which relates to performance], address uncertainty [which relates to risk and opportunity], and act with integrity [which relates to compliance]." This directly links achieving objectives with performance.

Page 24, Section 2.2.3, "Uncertainty, Opportunity, and Risk": States, "Opportunity is the possibility that an event will occur and positively affect the achievement of objectives." This establishes the direct connection between addressing opportunities and achieving objectives, which is measured by performance.

2. Racz, N., Weippl, E., & Seufert, A. (2010). A frame of reference for research of integrated governance, risk, and compliance (GRC). In Proceedings of the 43rd Hawaii International Conference on System Sciences.

Page 4, Section 3.2, "Performance Management": The paper, referencing the OCEG model, discusses performance management as the component focused on achieving objectives. It states, "The performance driver defines objectives and provides direction... by translating strategy into operational objectives and performance metrics." Measuring success against opportunities falls under these metrics. (DOI: https://doi.org/10.1109/HICSS.2010.353)