Advisory Services
Home / Advisory Services
Advisory Services
GRC Tenets
Leadership and Governance
Establish clear accountability, decision- making, and alignment with strategic objectives.
Continuous monitoring
Periodic reviews and robust framework for adherence to defined practices leading to continuous improvemen.
Culture and Ethics
Foster ethical behavior, anti- corruption, whistleblowing, and responsible gifting.
Policy Management and Exceptions
Define, Implement and enforce policies, for cyber security, privacy, business continuity. manage exceptions, and ensure compliance.
Risk Management and Risk Culture
Establish enterprise risk management framework, Identify, analyze, evaluate and mitigate risks to Sidra including third party risk management and enhance risk culture.
Compliance and Regulatory Adherence
Identify relevant controls for legal. Regulatory and contractual compliance. Including NCSA, PDPPL, GDPR, HIPAA, SOX
Internal Controls and Assurance
Safeguard assets and ensure accurate reporting with strong controls.
Ensure self assessment and audit.
Training and Awareness
Educate on GRC policies, procedures, risk, BCP, and TPRM practices
Our Approach
1. Understand
- Business context
- Assess current level of readiness
- Risk Appetite
- Applicable legal, regulatory and contractual requirements
2. Develop
- Policies, SOPs, Wis
- Risk Acceptance criteria
- Governance Checkpoints
- Competency
3. Define
- RTO & RPO
- Assess current level of readiness
- Periodicity of resilience drill
- Success criteria
4. Manage
- Security Operations
- Events/Incidents/Crisis
- Human resource
- Supply chain risks
- Anti Bribery, Anti Corruption controls
5. Continuous Improvement
- Compliance requirements are met
- Corrective actions from audits
- Compliance dashboard
- Fulfilment of security objective
- Absence of unknown surprise risks
- Continual Improvement