Corporate governance are mechanisms, processes and relations by which corporations are controlled and operated ("governed").
Governance is the overall complex system or framework of processes, functions, structures, rules, laws and norms borne out of the relationships, interactions, power dynamics and communication within an organized group of individuals which not only sets the boundaries of acceptable conduct and practices of different actors of the group and controls their decision-making processes through the creation and enforcement of rules and guidelines, but also manages, allocates and mobilizes relevant resources and capacities of different members and sets the overall direction of the group in order to effectively address its specific collective needs, problems and challenges. The concept of governance can be applied to social, political or economic entities such as a state and its government, a governed territory, a society, a community, a social group, a formal or informal organization, a corporation, a non-governmental organization, a non-profit organization, a project team, a market, a network or even the global stage. Governance can also pertain to a specific sector of activities such as land, environment, health, internet, security, etc. The degree of formality in governance depends on the internal rules of a given entity and its external interactions with similar entities. As such, governance may take many forms, driven by many different motivations and with many different results.
Information technology (IT)governance is a subset discipline of corporate governance, focused on information technology (IT) and its performance and risk management. The interest in IT governance is due to the ongoing need within organizations to focus value creation efforts on an organization's strategic objectives and to better manage the performance of those responsible for creating this value in the best interest of all stakeholders. It has evolved from The Principles of Scientific Management, Total Quality Management and ISO 9001 Quality Management System.
In business and project management, a responsibility assignment matrix (RAM), also known as RACI matrix or linear responsibility chart (LRC), is a model that describes the participation by various roles in completing tasks or deliverables for a project or business process. RACI is an acronym derived from the four key responsibilities most typically used: responsible, accountable, consulted, and informed. It is used for clarifying and defining roles and responsibilities in cross-functional or departmental projects and processes. There are a number of alternatives to the RACI model.
In a corporation, a stakeholder is a member of "groups without whose support the organization would cease to exist", as defined in the first usage of the word in a 1963 internal memorandum at the Stanford Research Institute. The theory was later developed and championed by R. Edward Freeman in the 1980s. Since then it has gained wide acceptance in business practice and in theorizing relating to strategic management, corporate governance, business purpose and corporate social responsibility (CSR). The definition of corporate responsibilities through a classification of stakeholders to consider has been criticized as creating a false dichotomy between the "shareholder model" and the "stakeholder model", or a false analogy of the obligations towards shareholders and other interested parties.
Clinical governance is a systematic approach to maintaining and improving the quality of patient care within the National Health Service (NHS) and private sector health care. Clinical governance became important in health care after the Bristol heart scandal in 1995, during which an anaesthetist, Dr Stephen Bolsin, exposed the high mortality rate for paediatric cardiac surgery at the Bristol Royal Infirmary. It was originally elaborated within the United Kingdom National Health Service (NHS), and its most widely cited formal definition describes it as:
A framework through which NHS organisations are accountable for continually improving the quality of their services and safeguarding high standards of care by creating an environment in which excellence in clinical care will flourish.
Executive sponsor is a role in project management, usually the senior member of the project board and often the chair. The project sponsor will be a senior executive in a corporation who is responsible to the business for the success of the project.
The chief risk officer (CRO), chief risk management officer (CRMO), or chief risk and compliance officer (CRCO) of a firm or corporation is the executive accountable for enabling the efficient and effective governance of significant risks, and related opportunities, to a business and its various segments. Risks are commonly categorized as strategic, reputational, operational, financial, or compliance-related. CROs are accountable to the Executive Committee and The Board for enabling the business to balance risk and reward. In more complex organizations, they are generally responsible for coordinating the organization's Enterprise Risk Management (ERM) approach. The CRO is responsible for assessing and mitigating significant competitive, regulatory, and technological threats to a firm's capital and earnings. The CRO roles and responsibilities vary depending on the size of the organization and industry. The CRO works to ensure that the firm is compliant with government regulations, such as Sarbanes–Oxley, and reviews factors that could negatively affect investments. Typically, the CRO is responsible for the firm's risk management operations, including managing, identifying, evaluating, reporting and overseeing the firm's risks externally and internally to the organization and works diligently with senior management such as chief executive officer and chief financial officer.
The project documentation (PID) is one of the most significant artifacts in project management, which provides the foundation for the business project.
Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes. Internal auditing might achieve this goal by providing insight and recommendations based on analyses and assessments of data and business processes. With commitment to integrity and accountability, internal auditing provides value to governing bodies and senior management as an objective source of independent advice. Professionals called internal auditors are employed by organizations to perform the internal auditing activity.
Governance in higher education is the means by which institutions for higher education are formally organized and managed. Simply, university governance is the way in which universities are operated. Governing structures for higher education are highly differentiated throughout the world, but the different models nonetheless share a common heritage. Internationally, tertiary education includes private not-for-profit, private for-profit, and public institutions governed by differentiated structures of management.
Internal control, as defined by accounting and auditing, is a process for assuring of an organization's objectives in operational effectiveness and efficiency, reliable financial reporting, and compliance with laws, regulations and policies. A broad concept, internal control involves everything that controls risks to an organization.
Small Charity Governance is concerned with the control and direction of charitable organisations established for the public benefit in the United Kingdom. The majority of charities in England and Wales have an income under £10,000, and only about 22% of charities have any staff at all. Many community groups and small voluntary organisations are not registered charities, because either their turnover is below the threshold for registration or their purpose does not fall within the definition of charitable activity. Much literature about governance is written from the perspective of the minority of larger charities; this article attempts to address the topic by focusing on the experience and concerns of the majority. Governance is the process through which a group of people make decisions which direct their collective efforts. This typically features delegation to a smaller group, which is in turn accountable to the stakeholders or owners of the organisation.
ISO 31000 is a family of international standards relating to risk management codified by the International Organization for Standardization. The standard is intended to provide a consistent vocabulary and methodology for assessing and managing risk, resolving the historic ambiguities and differences in the ways risk are described.
Stakeholder engagement is the process by which an organization involves people who may be affected by the decisions it makes or can influence the implementation of its decisions. They may support or oppose the decisions, be influential in the organization or within the community in which it operates, hold relevant official positions or be affected in the long term.
The chief audit executive (CAE), director of audit, director of internal audit, auditor general, or controller general is a high-level independent corporate executive with overall responsibility for internal audit.
Project sponsorship is the ownership of projects on behalf of the client organization.
Risk IT Framework, published in 2009 by ISACA, provides an end-to-end, comprehensive view of all risks related to the use of information technology (IT) and a similarly thorough treatment of risk management, from the tone and culture at the top to operational issues. It is the result of a work group composed of industry experts and academics from different nations, from organizations such as Ernst & Young, IBM, PricewaterhouseCoopers, Risk Management Insight, Swiss Life, and KPMG.
India's National Voluntary Guidelines on Social, Environmental and Economic Responsibilities of Business (NVGs) were released by the Ministry of Corporate Affairs (MCA) in July 2011 by Mr. Murli Deora, the former Honourable Minister for Corporate Affairs. The national framework on Business Responsibility is essentially a set of nine principles that offer businesses an Indian understanding and approach to inculcating responsible business conduct.
NIST Cybersecurity Framework (CSF) is a set of guidelines for mitigating organizational cybersecurity risks, published by the US National Institute of Standards and Technology (NIST) based on existing standards, guidelines, and practices. The framework "provides a high level taxonomy of cybersecurity outcomes and a methodology to assess and manage those outcomes", in addition to guidance on the protection of privacy and civil liberties in a cybersecurity context. It has been translated to many languages, and is used by several governments and a wide range of businesses and organizations.
