Turning data into actionable ­insight

1 October 2018 Security Services & Risk Management

Governance, Risk and Compliance (GRC) programmes are no longer a ‘tick-the-box’ exercise for organisations. Information technology advancements are better enabling GRC management software to become sophisticated enough to anticipate likely incidents and implement better controls, while also offering insights that can inform business opportunities and strategy.

GRC professionals are now adept at gathering, administering and scrutinising a vast and contrasting volume of data from multiple sources in order to fulfil their mandate of addressing enterprise-wide risks.

Bosman Stramrood.
Bosman Stramrood.

Bosman Stramrood, GM: Lexis GRC at LexisNexis, says: “Sustained technological innovation and disruption will ensure that the GRC function continues to evolve. Big Data and advanced analytics are increasingly helping risk and compliance professionals to uncover substantial risks earlier, but can now also provide the actionable business insight that boards and executives need to facilitate informed decision-making and ethics and integrity management on behalf of the organisation.”

Stramrood adds that company leadership must, however, first understand what insights they need in order to make good strategic and operational decisions. Companies that invest in and effectively draw value from their data will achieve clear gains over their competitors.

“The available data can help to pinpoint trends and parallels that will guide positive changes in organisational conduct. This organisational information can then be further enriched with external sources,” he says.

Just some of the advanced technologies now available include data visualisation and statistical analysis.

GRC data enables the business to retrieve and manage a vast amount of information that can aid in building a more risk savvy organisation. Boards can then take positive actions, strengthening controls, changing policy and procedures, and completely mitigating similar reputational threats in the future.

“Solutions that seamlessly combine available technologies with numerous data sources are those that will enable enhanced, sharper, real-time and fact-based decision-making for executive boards,” says Stramrood.

An example is Lexis GRC, which now boasts improved and interactive business intelligence dashboards as well as data visualisation tools. These bring case management to life through intuitive, audience-appropriate reporting views and interactive capabilities that aggregate or isolate risk hotspots.

Graphical reports on data from all modules is instantaneously available on management dashboards which could be used for day-to-day status updates, meetings, board-packs, etc. and exported in predefined, multi-format reports from PDF to Word to Excel. An action manager across components allows the user to set up tasks and actions from all components to ensure follow up, tracked history and audit trails. Notifications integrate with the user’s e-mail system.

This customisable software solution enables users to determine the modules that are most important to their business – starting with creating their own risk registers from the legal universe provided and isolating relevant acts and legislation that apply to their organisation. From there, the sophisticated GRC software will help identify areas that could potentially impact the business – and can be scaled up as the business changes.

For more information, contact LexisNexis South Africa, +27 31 268 3284, www.lexisnexis.co.za/governance-risk-and-compliance/grc-system





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Global security in 2026
Editor's Choice News & Events Security Services & Risk Management Industrial (Industry) Mining (Industry)
The World Security Report 2026 states: “In a world of increasing volatility, physical security has evolved. It is no longer just a defensive measure; it is a critical driver of corporate value.”

Read more...
Who is to blame for autonomous mistakes?
Editor's Choice Security Services & Risk Management Industrial (Industry) Mining (Industry)
Most supply agreements for AI-integrated equipment still closely resemble plant hire contracts from ten years ago: bilateral, human-focused, and silent on who bears the risk when a machine makes a decision on its own.

Read more...
Cyber resilience is the real defence
Security Services & Risk Management Information Security Infrastructure
Cyber resilience has evolved into a form of strategic agility, ensuring that when an interruption occurs, the business does not just survive; it snaps back into place before the market even notices a pause.

Read more...
Employees are SA’s biggest cyber threat
Security Services & Risk Management Information Security
South Africa experienced a 46% increase in insider cyber risk in 2026, surpassing the global average of 44%. What is more, 63% of South African companies surveyed expect insider-driven data losses to increase.

Read more...
The post-Q1 security checklist
Asset Management Security Services & Risk Management
By this time of year, employees have changed jobs or roles, suppliers may have changed, and devices have moved between offices, homes, and sites. This is the right time for businesses to run a practical post-Q1 security check.

Read more...
PoPIA turns its attention to gated access
News & Events Security Services & Risk Management
The Information Regulator has gazetted its proposed Code of Conduct for the processing of personal information at gated access points. At 65 pages long, the code signals a significant shift in how personal information is collected and managed at entry points.

Read more...
Your company is already breached, you just do not know it yet
Information Security Security Services & Risk Management
Attackers are no longer relying on sophisticated exploits to break-in. Instead, they are systematically targeting weak credentials, misconfigured systems, and exposed devices stemming from preventable gaps such as identity weaknesses and poor visibility across digital environments.

Read more...
Excellerate Services sets a new standard
News & Events Security Services & Risk Management
Excellerate Services relies on specialist expertise and the sophistication of its operations deployment and management. Central to this is an investment in smarter, data-driven operations through the Velocity and Performance Centre platforms.

Read more...
957 women killed in three months
News & Events Security Services & Risk Management
Despite years of summits, task teams and public commitments, South Africa’s femicide rate remains around five times higher than the global average, and too few are using the legal lifelines available.

Read more...
The security debt hidden in residential estates
Security Services & Risk Management Integrated Solutions Residential Estate (Industry)
Many residential estates undermine their own security not through a lack of technology, but through hidden weaknesses in gate design, fragmented systems, recurring software dependence, weak operational ownership, and insufficient estate management input.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.