Skip to main content

GRC Crisis Planning Survey: How Ready Were We for COVID-19?

Internal Controls
Performance Reporting
Process Improvement
OCEG logo with additional graphics.
3 min read
Published: 24 August 2020
Last Updated: 15 August 2023

No one could have planned for the exact circumstances of the novel coronavirus pandemic, but some organisations were more prepared than others: those with well-integrated governance, risk and compliance (GRC) capabilities.

The Open Compliance and Ethics Group (OCEG)—which created the concept of GRC to allow organisations to achieve objectives in a principled way—surveyed 828 individuals about their companies’ crisis planning before, during and after COVID-19. Below are some key findings.

OCEG Crisis Readiness Planning Survey 2020

Among survey respondents, 29% had highly integrated GRC capabilities across their enterprise, 20% had mostly siloed processes and the remainder fell somewhere in between. The integrated group was far more prepared for a global crisis.

Series of graphs

Source: OCEG Crisis Readiness Planning Survey 2020 

OCEG suggests organisations with integrated GRC capabilities have set themselves up for better communication, the agility to adapt to changes and shifts and engagement in effective crisis readiness planning and the advancement of planning processes.

The differences are even greater when comparing respondents who use integrated GRC technology to those using manual methods (e.g., spreadsheets, file sharing) to conduct their processes.

Once again, those with integrated GRC capabilities were more prepared for a crisis. Their capabilities led to clearer communication, easier access and increased agility to changing risks. The stats show:

Series of graphs.

Source: OCEG Crisis Readiness Planning Survey 2020 

The survey found that only 25% of respondents were very confident that their organisations had planned well for a crisis prior to COVID-19. 

Additionally, only 36% of the respondents feel very confident that their organisations have the right resources and processes in place to manage another global crisis in the next 24 months.

No one foresaw the impact of COVID-19, but the complexities left in its wake can be used to build better crisis management plans. One way to better an organiation’s preparedness is through the use of a GRC system. When GRC is integrated throughout an enterprise, supported by a strong architecture of GRC technology, several key steps in the crisis readiness planning process are already at least partially completed. 

The use of a GRC system also can provide visibility into crisis planning and therefore build confidence in your workforce. Then the crisis controls are available, visible and practiced, and employees and stakeholders can trust that they would be executed if needed.

Check out the full report to see more statistics on crisis management before, during, and after COVID-19.

You May Also Like

Online registration is currently unavailable.

Please email events@workiva to register for this event.

Our forms are currently down.

Please contact us at

Our forms are currently down.

Please contact us at