0% found this document useful (0 votes)
251 views3 pages

RFP-GRC Vs ERM-FINAL

The document is a request for proposals from the Institute of Internal Auditors Research Foundation regarding a research project on Governance, Risk, and Control (GRC) and how it differs from Enterprise Risk Management (ERM). Proposals should not exceed 5 pages and include: an abstract, description of the research question and methodology, expected results and benefits, timeline and budget, and researcher CVs. The purpose of the research is to define and clarify common elements of GRC and ERM frameworks globally and understand internal auditing's role in each. Deliverables would include an applied research report of 40-80 pages, article(s) for publication, and presentation summarizing findings.

Uploaded by

jaholme
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
251 views3 pages

RFP-GRC Vs ERM-FINAL

The document is a request for proposals from the Institute of Internal Auditors Research Foundation regarding a research project on Governance, Risk, and Control (GRC) and how it differs from Enterprise Risk Management (ERM). Proposals should not exceed 5 pages and include: an abstract, description of the research question and methodology, expected results and benefits, timeline and budget, and researcher CVs. The purpose of the research is to define and clarify common elements of GRC and ERM frameworks globally and understand internal auditing's role in each. Deliverables would include an applied research report of 40-80 pages, article(s) for publication, and presentation summarizing findings.

Uploaded by

jaholme
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

Request for Proposal

Governance Risk and Control (GRC): What is it?


How is it different than Enterprise Risk Management (ERM)?

INTRODUCTION AND INSTRUCTIONS


The Institute of Internal Auditors Research Foundation (IIARF) is the global leader in sponsoring,
disseminating, and promoting research and knowledge resources to enhance the development and
effectiveness of the internal audit profession. The IIARF continually monitors demands by members and
stakeholders of the professional to ensure they are receiving relevant and timely information.

This document outlines a topic of interest to The IIARF. Proposals should present the approach you
would take to meet the requirements as stated in this Request for Proposal. Proposals should not exceed
five pages exclusive of the appendices described below, and should contain the following basic elements:

1. Identification of the Priority Topic for which proposal is submitted.


2. A one-paragraph abstract, summarizing the research question, the method to be used and how it
will benefit the internal audit profession.
3. Project description including:
a. A statement of the research issue/question being addressed and how it relates to the
internal auditing profession;
b. A description of previous research, if any, and how your project adds to the previous work;
c. A statement of research hypotheses being tested, if applicable;
d. A statement of the research method that will be used;
e. A statement of the expected results and benefits to the internal audit profession;
f. A statement of the expected publication output(s) from the project, (e.g., practitioner
article, monograph, scholarly journal article, book, etc.);
g. Itemized timeline and budget, including budget rationale.
h. Identification of proposed members of the research team including a brief description of
their role.
i. Appendices:
i. An appendix containing proposed interview questions/guidelines, and survey or
experimental instruments, if applicable.
ii. Curriculum vitae (CV) for each researcher (3 pages maximum)
iii. Previous researcher affiliation with The IIA (previous research or educational
products produced, volunteer participation, chapter officer, etc.)

Return your proposal as a Microsoft Word document via e-mail to [email protected].


When this completed document is returned to us, we will begin our review process which normally lasts
4-6 weeks, but may take longer.

ALL RESPONSES TO THIS REQUEST FOR PROPOSAL


ARE DUE NO LATER THAN MARCH 11, 2011
If additional information is needed, please contact The IIA Research Foundation:
Tel: +1-407-937-1356
E-mail: [email protected]

Page | 1
Request for Proposal
TOPIC INFORMATION
Governance Risk and Control (GRC): What is it?
Priority Topic
How is it different than Enterprise Risk Management (ERM)?
Topic Description GRC and ERM are “hot topics” since the enactment of Sarbanes-Oxley in
2002 and the roll-out of the Committee of Sponsoring Organizations of the
Treadway Committee (COSO) ERM framework. But different organizations
(and professional associations) have defined and implemented GRC and
ERM differently.
Product Type The Research Foundation is seeking an applied research report, based on
survey (40-80 pages)

Purpose and The purpose of this study is to assist enterprise oversight function(s) and
Objectives internal auditing in defining and clarifying the state of their GRC and/or
ERM implementation. The common, or “generally accepted,” components of
GRC and ERM need to be identified and put in context relative to each other.
Content Guidelines The research will address the following questions:

The IIA Research 1. What are the common elements of GRC frameworks globally? What are
Foundation (IIARF) the variations? What is internal auditing’s role?
aims to expand
knowledge and the 2. What are the common elements of ERM frameworks globally? What are
practice of internal the variations? What is internal auditing’s role?
auditing by providing
relevant research and
educational products
that help us to
understand, shape,
and advance the
global profession.
Proposals with a
global scope are
encouraged and will
receive preferred
review status. The
participation of
internal audit
practitioner(s) on the
research team will be
a plus.

Target Audience The target audience for this report is chief audit executives, GRC function(s),
ERM function(s), and board-level committee(s).

Page | 2
Request for Proposal
Timeframe Six to nine months. The research will begin immediately upon approval of
contract.
Deliverables [X] The primary deliverable is an applied research report of 40 to 80 pages.
[X] An article suitable for Internal Auditor, other IIA publications, and/or
The IIARF web site.
[ ] An academic article.(researcher discretion)
[X] A PowerPoint presentation summarizing the major findings and
conclusions of the research. May be 10-20 slides for use at meetings,
conferences, etc.

References What GRC Could Mean to Your Organization, Tone at the Top, The Institute
of Internal Auditors, August 2010

Page | 3

You might also like