What are the key measurement criteria for the REVIEW component?

The OCEG GRC Capability Model specifies that the REVIEW component's purpose is to monitor and assess the design and operating effectiveness of the GRC capability. This evaluation is conducted against four key criteria: Effectiveness (achieving stated objectives), Efficiency (optimizing resource use), Resilience (withstanding and recovering from adverse events), and Agility (adapting to change). These criteria provide a comprehensive framework for measuring the performance and maturity of the integrated GRC functions across the organization.

A. These represent specific business objectives or risk areas (e.g., compliance, safety) that GRC helps manage, not the criteria for measuring the GRC capability itself.

C. These are organizational values or cultural enablers that support a strong GRC capability but are not the primary, defined measurement criteria for its performance.

D. These are high-level financial and market performance indicators for the entire business, not the specific metrics used to evaluate the GRC capability's function.

1. OCEG. (2021). GRC Capability Model, Version 3.5. Section 2.3, "Measuring GRC Capability Performance," p. 21. The document states, "We recommend that every organization establish four key measurement criteria for its GRC capability: Effective, Efficient, Resilient, Agile." This section further defines each term in the context of GRC capability evaluation.