I have an initiated a project at a one of my clients to establish the policies, procedures, metrics, reporting structures, and culture to support a Governance Risk and Compliance program. This is not a software selection process. What are the key business processes or project phases that we need to complete prior to even thinking about SAP / Archer / Service Now type questions. Saving Changes...
Like any other business transformation, I'd expect that you'd need to get your policy finalized, then define the processes and get buy-in from all key stakeholders on those before looking at supporting tools.
How you structure the work really depends - on way would be the non-tool stuff could be one project which would also drive out the must have requirements for a tool which would be addressed in a separate project.
Thank you Kiron. That was in general my approach, glad to see I should be on the right track. As I move along I might see what I can share with the community on my approach. Saving Changes...