What does agility in the context of the PERFORM component refer to?

Agility, within the OCEG GRC Capability Model's PERFORM component, refers to the ability to rapidly adapt and modify actions, controls, and policies in response to changes in the internal or external environment. This ensures the organization can maintain Principled Performance by quickly adjusting its operational activities to address new risks, seize emerging opportunities, or comply with updated requirements without significant disruption. It is about timely responsiveness to maintain alignment with strategic objectives.

A. This describes stakeholder and third-party relationship management, which is a specific capability but not the definition of agility.

C. This describes innovation. While innovation can enhance agility, agility itself is the capacity to respond to change, not necessarily to create new methods.

D. This describes conflict resolution, which is a distinct management skill and not synonymous with the organizational adaptability that defines agility.

1. OCEG, "GRC Capability Model," Version 3.5, 2020. Page 12, Section 1.3, "Characteristics of an Integrated GRC Capability." The model defines an agile capability as one that is "anticipating and responding to changes in a timely manner." This principle applies to all components, including PERFORM, which involves the execution of actions and controls that must be adaptable to change.

2. OCEG, "GRC Capability Model," Version 3.5, 2020. Page 53, Section 4.1, "Overview of the Perform Component." The PERFORM component executes actions to address threats and requirements. The principle of agility requires that these actions can be changed quickly when the underlying threats, requirements, or business objectives (defined in the ALIGN component) are altered.