What is involved in Risk Management and Compliance
Find out what the related areas are that Risk Management and Compliance connects with, associates with, correlates with or affects, and which require thought, deliberation, analysis, review and discussion. This unique checklist stands out in a sense that it is not per-se designed to give answers, but to engage the reader and lay out a Risk Management and Compliance thinking-frame.
How far is your company on its Risk Management and Compliance journey?
Take this short survey to gauge your organization’s progress toward Risk Management and Compliance leadership. Learn your strongest and weakest areas, and what you can do now to create a strategy that delivers results.
To address the criteria in this checklist for your organization, extensive selected resources are provided for sources of further research and information.
Start the Checklist
Below you will find a quick checklist designed to help you think about which Risk Management and Compliance related domains to cover and 197 essential critical questions to check off in that domain.
The following domains are covered:
Risk Management and Compliance, Governance, risk management, and compliance, Chief compliance officer, Chief governance officer, Climate governance, Clinical governance, Collaborative governance, Conformity assessment, Corporate governance, Cultural governance, Data governance, Earth system governance, Ecclesiastical polity, Enterprise risk management, Environmental, social and corporate governance, Environmental governance, Global governance, Good governance, Governance in higher education, ISO 19600, Information Technology, Information governance, Information system, Local governance, Market governance mechanism, Multistakeholder governance model, Network governance, Ocean governance, Open-source governance, Political party governance, Private governance, Project governance, Records management, Regulatory compliance, Risk appetite, Risk management, SOA governance, Security sector governance and reform, Soil governance, Sustainable Governance Indicators, Technology governance, Transnational governance, Website governance, World Governance Index:
Risk Management and Compliance Critical Criteria:
Focus on Risk Management and Compliance leadership and grade techniques for implementing Risk Management and Compliance controls.
– Are we using Risk Management and Compliance to communicate information about our Cybersecurity Risk Management programs including the effectiveness of those programs to stakeholders, including boards, investors, auditors, and insurers?
– Vrm programs run the gamut from the collection of a few documents to advanced Risk Management software tools. what is appropriate for our organization?
– Where should the organization enhance its Risk Management processes to have maximum benefit and impact on its ability to achieve business objectives?
– What competencies are important to the organizations risk management process, and what type of training does the organization provide?
– How would you characterize the adequacy of Risk Management typically done for projects and programs in your organization?
– Is there a repeatable reporting process in place across the entities, so results are centrally coordinated, organized, and managed?
– Are standards for risk assessment methodology established, so risk information can be compared across entities?
– Will our actions, process, program or procedure result in the breach of any law, regulation or contract?
– Are there any threats or vulnerabilities in the environment? Has anything changed in production?
– Are new risks introduced as a result of the identified risks being controlled?
– Our project management standards do they support or undermine Risk Management?
– Do entities have sufficient internal security leadership to implement programs?
– Are regular risk assessments executed across all entities?
– What can be done to mitigate and reduce risks?
– Will the rule interfere with others?
– How are Risk Management decisions escalated?
– How do I know my identity is at risk?
– How many different rules are there?
– How do we measure risk?
– Are any two policies the same?
Governance, risk management, and compliance Critical Criteria:
Merge Governance, risk management, and compliance strategies and report on developing an effective Governance, risk management, and compliance strategy.
– What may be the consequences for the performance of an organization if all stakeholders are not consulted regarding Risk Management and Compliance?
– Who is responsible for ensuring appropriate resources (time, people and money) are allocated to Risk Management and Compliance?
– Have you identified your Risk Management and Compliance key performance indicators?
Chief compliance officer Critical Criteria:
Concentrate on Chief compliance officer risks and look for lots of ideas.
– Think about the people you identified for your Risk Management and Compliance project and the project responsibilities you would assign to them. what kind of training do you think they would need to perform these responsibilities effectively?
– Consider your own Risk Management and Compliance project. what types of organizational problems do you think might be causing or affecting your problem, based on the work done so far?
Chief governance officer Critical Criteria:
Graph Chief governance officer outcomes and look at it backwards.
– How can you negotiate Risk Management and Compliance successfully with a stubborn boss, an irate client, or a deceitful coworker?
– Do the Risk Management and Compliance decisions we make today help people and the planet tomorrow?
– What are the long-term Risk Management and Compliance goals?
Climate governance Critical Criteria:
Canvass Climate governance adoptions and report on setting up Climate governance without losing ground.
– In the case of a Risk Management and Compliance project, the criteria for the audit derive from implementation objectives. an audit of a Risk Management and Compliance project involves assessing whether the recommendations outlined for implementation have been met. in other words, can we track that any Risk Management and Compliance project is implemented as planned, and is it working?
– What tools and technologies are needed for a custom Risk Management and Compliance project?
– Which individuals, teams or departments will be involved in Risk Management and Compliance?
Clinical governance Critical Criteria:
Inquire about Clinical governance risks and report on setting up Clinical governance without losing ground.
– What new services of functionality will be implemented next with Risk Management and Compliance ?
– How do we go about Comparing Risk Management and Compliance approaches/solutions?
Collaborative governance Critical Criteria:
Consolidate Collaborative governance management and get going.
– Is Risk Management and Compliance dependent on the successful delivery of a current project?
Conformity assessment Critical Criteria:
Confer over Conformity assessment outcomes and get answers.
– What role(s) do or should national/international standards and organizations that develop national/international standards play in critical infrastructure Cybersecurity conformity assessment?
– Is Risk Management and Compliance Realistic, or are you setting yourself up for failure?
– How can the value of Risk Management and Compliance be defined?
Corporate governance Critical Criteria:
Model after Corporate governance tactics and point out improvements in Corporate governance.
– What are our needs in relation to Risk Management and Compliance skills, labor, equipment, and markets?
– How do we Lead with Risk Management and Compliance in Mind?
– What are our Risk Management and Compliance Processes?
Cultural governance Critical Criteria:
Drive Cultural governance planning and differentiate in coordinating Cultural governance.
– In what ways are Risk Management and Compliance vendors and us interacting to ensure safe and effective use?
– Do we monitor the Risk Management and Compliance decisions made and fine tune them as they evolve?
– Who sets the Risk Management and Compliance standards?
Data governance Critical Criteria:
Substantiate Data governance outcomes and remodel and develop an effective Data governance strategy.
– Has an assessment been conducted to ensure the long-term sustainability of the proposed or established data governance policies and procedures, including adequate staffing, tools, technologies, and resources?
– Is there an existing data element or combination of data elements that can answer the same question that the proposed new data element is meant to address?
– Is there an organization-wide metadata standard, such as an extension of the dublin core, for use by search tools, multiple repositories, etc.?
– Is the data already collected/maintained or is similar data that might meet the need commonly collected?
– Does the search engine integrate with the taxonomy to improve searches and organize results?
– What if youre still trying to create collections of policies, rules, and data definitions?
– How can your data be protected from both authorized and unauthorized access?
– What types of information should be included in the data dictionary?
– Who knows the nitty-gritty details about your systems?
– What are the key objectives of your organization?
– What do you want data governance to accomplish?
– What factors make data governance successful?
– Do you use the best tools money can buy?
– What else are you trying to accomplish?
– Why is data governance important?
– How does data governance work?
– Can Data Quality be improved?
– Do you use source control?
– Who is a data stakeholder?
– Other data stewards?
Earth system governance Critical Criteria:
Have a session on Earth system governance failures and do something to it.
– What sources do you use to gather information for a Risk Management and Compliance study?
– Who needs to know about Risk Management and Compliance ?
Ecclesiastical polity Critical Criteria:
Scan Ecclesiastical polity adoptions and overcome Ecclesiastical polity skills and management ineffectiveness.
– What management system can we use to leverage the Risk Management and Compliance experience, ideas, and concerns of the people closest to the work to be done?
– What role does communication play in the success or failure of a Risk Management and Compliance project?
Enterprise risk management Critical Criteria:
Drive Enterprise risk management management and arbitrate Enterprise risk management techniques that enhance teamwork and productivity.
– Has management conducted a comprehensive evaluation of the entirety of enterprise Risk Management at least once every three years or sooner if a major strategy or management change occurs, a program is added or deleted, changes in economic or political conditions exist, or changes in operations or methods of processing information have occurred?
– Does the information infrastructure convert raw data into more meaningful, relevant information to create knowledgeable and wise decisions that assists personnel in carrying out their enterprise Risk Management and other responsibilities?
– Has management considered from external parties (e.g., customers, vendors and others doing business with the entity, external auditors, and regulators) important information on the functioning of an entitys enterprise Risk Management?
– Are findings of enterprise Risk Management deficiencies reported to the individual responsible for the function or activity involved, as well as to at least one level of management above that person?
– Do regular face-to-face meetings occur with risk champions or other employees from a range of functions and entity units with responsibility for aspects of enterprise Risk Management?
– Is a technical solution for data loss prevention -i.e., systems designed to automatically monitor for data leakage -considered essential to enterprise risk management?
– Has management taken appropriate corrective actions related to reports from external sources for their implications for enterprise Risk Management?
– Has management taken an occasional fresh look at focusing directly on enterprise Risk Management effectiveness?
– To what extent is Cybersecurity risk incorporated into organizations overarching enterprise risk management?
– What other jobs or tasks affect the performance of the steps in the Risk Management and Compliance process?
– To what extent is Cybersecurity risk incorporated into organizations overarching enterprise Risk Management?
– What is the source of the strategies for Risk Management and Compliance strengthening and reform?
– How do we measure improved Risk Management and Compliance service perception, and satisfaction?
– To what extent is Cybersecurity Risk Management integrated into enterprise risk management?
– Do policy and procedure manuals address managements enterprise Risk Management philosophy?
– How is the enterprise Risk Management model used to assess and respond to risk?
– When you need advice about enterprise Risk Management, whom do you call?
– What is our enterprise Risk Management strategy?
Environmental, social and corporate governance Critical Criteria:
Survey Environmental, social and corporate governance strategies and simulate teachings and consultations on quality process improvement of Environmental, social and corporate governance.
– Marketing budgets are tighter, consumers are more skeptical, and social media has changed forever the way we talk about Risk Management and Compliance. How do we gain traction?
– How do we go about Securing Risk Management and Compliance?
Environmental governance Critical Criteria:
Troubleshoot Environmental governance tasks and gather practices for scaling Environmental governance.
– Are we making progress? and are we making progress as Risk Management and Compliance leaders?
Global governance Critical Criteria:
Align Global governance governance and intervene in Global governance processes and leadership.
– Are there any easy-to-implement alternatives to Risk Management and Compliance? Sometimes other solutions are available that do not require the cost implications of a full-blown project?
– What are the key elements of your Risk Management and Compliance performance improvement system, including your evaluation, organizational learning, and innovation processes?
– What are the barriers to increased Risk Management and Compliance production?
Good governance Critical Criteria:
Disseminate Good governance outcomes and test out new things.
– Why should we adopt a Risk Management and Compliance framework?
Governance in higher education Critical Criteria:
Canvass Governance in higher education governance and differentiate in coordinating Governance in higher education.
– What vendors make products that address the Risk Management and Compliance needs?
– How is the value delivered by Risk Management and Compliance being measured?
– Do we have past Risk Management and Compliance Successes?
ISO 19600 Critical Criteria:
Set goals for ISO 19600 adoptions and devise ISO 19600 key steps.
– How likely is the current Risk Management and Compliance plan to come in on schedule or on budget?
Information Technology Critical Criteria:
Boost Information Technology engagements and probe Information Technology strategic alliances.
– what is the best design framework for Risk Management and Compliance organization now that, in a post industrial-age if the top-down, command and control model is no longer relevant?
– Do the response plans address damage assessment, site restoration, payroll, Human Resources, information technology, and administrative support?
– Does your company have defined information technology risk performance metrics that are monitored and reported to management on a regular basis?
– If a survey was done with asking organizations; Is there a line between your information technology department and your information security department?
– Does Risk Management and Compliance analysis isolate the fundamental causes of problems?
– How does new information technology come to be applied and diffused among firms?
– The difference between data/information and information technology (it)?
– When do you ask for help from Information Technology (IT)?
Information governance Critical Criteria:
Revitalize Information governance risks and point out improvements in Information governance.
– How does your organization assess staff training needs and ensure job/role specific information governance training is provided to all staff?
– How is the chief executive or equivalent management board consulted and/or informed of information governance issues?
– What governance arrangements do you have in place to support the current and evolving information governance agenda?
– What is the organizations most effective method of training for information governance knowledge and skills?
– What is the organizations preferred method of training for information governance knowledge and skills?
– In relation to information governance, what are the key challenges or changes facing your organization?
– Does the Risk Management and Compliance task fit the clients priorities?
– Is Risk Management and Compliance Required?
Information system Critical Criteria:
Do a round table on Information system quality and intervene in Information system processes and leadership.
– Have we developed a continuous monitoring strategy for the information systems (including monitoring of security control effectiveness for system-specific, hybrid, and common controls) that reflects the organizational Risk Management strategy and organizational commitment to protecting critical missions and business functions?
– Has your organization conducted a cyber risk or vulnerability assessment of its information systems, control systems, and other networked systems?
– Are information security events and weaknesses associated with information systems communicated in a manner to allow timely corrective action to be taken?
– Would an information systems (is) group with more knowledge about a data production process produce better quality data for data consumers?
– Are information systems and the services of information systems things of value that have suppliers and customers?
– What does the customer get from the information systems performance, and on what does that depend, and when?
– What are the principal business applications (i.e. information systems available from staff PC desktops)?
– Why Learn About Security, Privacy, and Ethical Issues in Information Systems and the Internet?
– What are information systems, and who are the stakeholders in the information systems game?
– How secure -well protected against potential risks is the information system ?
– Is unauthorized access to information held in information systems prevented?
– Are there Risk Management and Compliance problems defined?
– Is authorized user access to information systems ensured?
– How are our information systems developed ?
– Is security an integral part of information systems?
– How can we improve Risk Management and Compliance?
Local governance Critical Criteria:
Grade Local governance leadership and devise Local governance key steps.
– How can we incorporate support to ensure safe and effective use of Risk Management and Compliance into the services that we provide?
– Is there a Risk Management and Compliance Communication plan covering who needs to get what information when?
– What are internal and external Risk Management and Compliance relations?
Market governance mechanism Critical Criteria:
Incorporate Market governance mechanism failures and explore and align the progress in Market governance mechanism.
– At what point will vulnerability assessments be performed once Risk Management and Compliance is put into production (e.g., ongoing Risk Management after implementation)?
– Do those selected for the Risk Management and Compliance team have a good general understanding of what Risk Management and Compliance is all about?
Multistakeholder governance model Critical Criteria:
Administer Multistakeholder governance model adoptions and look at it backwards.
– Does Risk Management and Compliance create potential expectations in other areas that need to be recognized and considered?
– Have all basic functions of Risk Management and Compliance been defined?
Network governance Critical Criteria:
Cut a stake in Network governance issues and revise understanding of Network governance architectures.
– What tools do you use once you have decided on a Risk Management and Compliance strategy and more importantly how do you choose?
– What business benefits will Risk Management and Compliance goals deliver if achieved?
– Are accountability and ownership for Risk Management and Compliance clearly defined?
Ocean governance Critical Criteria:
Extrapolate Ocean governance goals and get answers.
– What are the Key enablers to make this Risk Management and Compliance move?
Open-source governance Critical Criteria:
Paraphrase Open-source governance adoptions and assess and formulate effective operational and Open-source governance strategies.
– Will Risk Management and Compliance deliverables need to be tested and, if so, by whom?
– What are current Risk Management and Compliance Paradigms?
– How much does Risk Management and Compliance help?
Political party governance Critical Criteria:
Demonstrate Political party governance engagements and clarify ways to gain access to competitive Political party governance services.
– How does the organization define, manage, and improve its Risk Management and Compliance processes?
Private governance Critical Criteria:
Jump start Private governance issues and optimize Private governance leadership as a key to advancement.
– Do you monitor the effectiveness of your Risk Management and Compliance activities?
– What are specific Risk Management and Compliance Rules to follow?
Project governance Critical Criteria:
Talk about Project governance projects and secure Project governance creativity.
– What are the success criteria that will indicate that Risk Management and Compliance objectives have been met and the benefits delivered?
Records management Critical Criteria:
Understand Records management leadership and arbitrate Records management techniques that enhance teamwork and productivity.
– Have records center personnel received training on the records management aspects of the Quality Assurance program?
– Are there recognized Risk Management and Compliance problems?
– Are there Risk Management and Compliance Models?
Regulatory compliance Critical Criteria:
Accelerate Regulatory compliance strategies and summarize a clear Regulatory compliance focus.
– Does Risk Management and Compliance include applications and information with regulatory compliance significance (or other contractual conditions that must be formally complied with) in a new or unique manner for which no approved security requirements, templates or design models exist?
– Which customers cant participate in our Risk Management and Compliance domain because they lack skills, wealth, or convenient access to existing solutions?
– In the case of public clouds, will the hosting service provider meet their regulatory compliance requirements?
– Regulatory compliance: Is the cloud vendor willing to undergo external audits and/or security certifications?
– What is Regulatory Compliance ?
Risk appetite Critical Criteria:
Reconstruct Risk appetite planning and devote time assessing Risk appetite and its risk.
– How do we revise the risk appetite statement so that we can link it to risk culture, roll it out effectively to the business units and bring it to life for them. How do we make it meaningful in connecting it with what they do day-to-day?
– Is there a clearly defined IT risk appetite that has been successfully implemented?
– Risk appetite: at what point does the risk become unacceptable?
Risk management Critical Criteria:
Test Risk management decisions and cater for concise Risk management education.
– Can we describe our organizations policies and procedures governing risk generally and Cybersecurity risk specifically. How does senior management communicate and oversee these policies and procedures?
– Has your organization conducted an evaluation of the Cybersecurity risks for major systems at each stage of the system deployment lifecycle?
– How can you start to build to a position of trust and risk management when setting up cloud computing for your organization?
– What information is generated by, consumed by, processed on, stored in, and retrieved by the Risk assessed systems?
– Have we articulated reporting elements for the kinds of information you disclose in the event of an attack?
– Will we be inclusive enough yet not disruptive to ongoing business, for effective Cybersecurity practices?
– Is there an agreed-upon framework by which risk culture is regularly assessed?
– What is our approach to Risk Management in the specific area of social media?
– What are the core responsibilities of our Risk Management committee?
– What are the actions that are required to meet the security requirements?
– What is the likelihood of risk events happening?
– Are there beyond-compliance activities?
– Why is Risk Management needed?
– Who has the authority to manage risk?
– How Do We Categorize Risk?
SOA governance Critical Criteria:
Unify SOA governance engagements and get going.
– How do we Improve Risk Management and Compliance service perception, and satisfaction?
Security sector governance and reform Critical Criteria:
Give examples of Security sector governance and reform engagements and gather practices for scaling Security sector governance and reform.
– What are your results for key measures or indicators of the accomplishment of your Risk Management and Compliance strategy and action plans, including building and strengthening core competencies?
– Is the Risk Management and Compliance organization completing tasks effectively and efficiently?
– Why are Risk Management and Compliance skills important?
Soil governance Critical Criteria:
Test Soil governance engagements and learn.
– What are the record-keeping requirements of Risk Management and Compliance activities?
Sustainable Governance Indicators Critical Criteria:
Set goals for Sustainable Governance Indicators quality and define what do we need to start doing with Sustainable Governance Indicators.
– Who is the main stakeholder, with ultimate responsibility for driving Risk Management and Compliance forward?
– Meeting the challenge: are missed Risk Management and Compliance opportunities costing us money?
– What threat is Risk Management and Compliance addressing?
Technology governance Critical Criteria:
Match Technology governance outcomes and assess and formulate effective operational and Technology governance strategies.
– Among the Risk Management and Compliance product and service cost to be estimated, which is considered hardest to estimate?
Transnational governance Critical Criteria:
Accelerate Transnational governance outcomes and reinforce and communicate particularly sensitive Transnational governance decisions.
– What will be the consequences to the business (financial, reputation etc) if Risk Management and Compliance does not go ahead or fails to deliver the objectives?
Website governance Critical Criteria:
Conceptualize Website governance issues and drive action.
– What are our best practices for minimizing Risk Management and Compliance project risk, while demonstrating incremental value and quick wins throughout the Risk Management and Compliance project lifecycle?
– What are the disruptive Risk Management and Compliance technologies that enable our organization to radically change our business processes?
– What is our Risk Management and Compliance Strategy?
World Governance Index Critical Criteria:
Explore World Governance Index engagements and point out World Governance Index tensions in leadership.
– Do several people in different organizational units assist with the Risk Management and Compliance process?
– What are the business goals Risk Management and Compliance is aiming to achieve?
This quick readiness checklist is a selected resource to help you move forward. Learn more about how to achieve comprehensive insights with the Risk Management and Compliance Self Assessment:
Author: Gerard Blokdijk
CEO at The Art of Service | theartofservice.com
Gerard is the CEO at The Art of Service. He has been providing information technology insights, talks, tools and products to organizations in a wide range of industries for over 25 years. Gerard is a widely recognized and respected information expert. Gerard founded The Art of Service consulting business in 2000. Gerard has authored numerous published books to date.
To address the criteria in this checklist, these selected resources are provided for sources of further research and information:
Risk Management and Compliance External links:
Alyne | Cyber Security, Risk Management and Compliance …
Chief compliance officer External links:
General Counsel & Chief Compliance Officer Daniel Follis, Jr.
Chief governance officer External links:
Chief Governance Officer, OSGE | Devex
Climate governance External links:
[PDF]A Polycentric Approach to Global Climate Governance
Clinical governance External links:
[PPT]Clinical Governance – University of Pittsburgh
Collaborative governance External links:
Portland State PSU Online | Collaborative Governance
Welcome to Collaborative Governance
Conformity assessment External links:
Conformity assessment | NIST
AB-CAB – Accreditation Board for Conformity Assessment …
Conformity Assessment – NEMA
Corporate governance External links:
The Harvard Law School Forum on Corporate Governance …
Corporate Governance – About Us | Aetna
Program on Corporate Governance – About the Program
Cultural governance External links:
Cultural governance in contemporary China: popular …
Data governance External links:
Dataguise | Sensitive Data Governance
What is data governance (DG)? – Definition from WhatIs.com
Institutional Data Governance | Vanderbilt University
Earth system governance External links:
Earth System Governance Project – Home | Facebook
Earth System Governance | The MIT Press
Earth System Governance | The MIT Press
Enterprise risk management External links:
[PDF]Guide to Enterprise Risk Management – Office of The …
ERMA – Enterprise Risk Management Academy
KPA is a leading enterprise risk management organization.
Environmental governance External links:
The Global Environmental Governance Project – Home | Facebook
Global governance External links:
Global Governance Watch©
Good governance External links:
New Hanover County | The Model of Good Governance | …
TASB Good Governance
The Coalition for Good Governance
Governance in higher education External links:
Leadership and Governance in Higher Education | …
[PDF]Shared Governance in Higher Education – Luna …
Information Technology External links:
Umail | University Information Technology Services
Information governance External links:
ZyLAB | eDiscovery & Information Governance
InfoGovCon: The Information Governance Conference 2017
Information system External links:
National Motor Vehicle Title Information System
National Motor Vehicle Title Information System (NMVTIS)
National Motor Vehicle Title Information System
Local governance External links:
The Hague Academy for Local Governance – Think …
Local Governance Research Labatory
Network governance External links:
Globalization, Edu-Business and Network Governance: …
POD Network Governance – POD Network: Professional …
Ocean governance External links:
“Regional Ocean Governance: A Look at California” by …
Ocean Governance | U.S. Department of the Interior
Ocean Governance for Sustainability – Challenges, …
Private governance External links:
[PDF]Merging Public and Private Governance: How Disney’s …
Project governance External links:
NuGet Project Governance | Microsoft Docs
[PDF]Payroll Services Consolidation Project Governance …
services.oregon.gov/das/Docs/Governance Structure PSCP.pdf
400: IT PROJECT GOVERNANCE – OIT
Records management External links:
Title and Records Management | Loan Portfolio Servicing
National Archives Records Management Information Page
Records Management – Record Series
Regulatory compliance External links:
Regulatory Compliance testing and certification
Brandywine Drumlabels – GHS Regulatory Compliance …
Trinity Consultants – Regulatory Compliance …
Risk appetite External links:
Risk Appetite – BrightTALK
[PDF]RISK APPETITE AND TOLERANCE – NYBA
Risk Appetite – Aon
Risk management External links:
Risk Management Plan (RMP) Rule | US EPA
Risk Management Jobs – Apply Now | CareerBuilder
“Billions” Risk Management (TV Episode 2017) – IMDb
SOA governance External links:
SOA Governance Standards | OCIO
Best SOA Governance Solutions in 2017 | IT Central Station
Security sector governance and reform External links:
Security Sector Governance and Reform: Guidelines for …
Technology governance External links:
Information Technology Governance Maturity: Examining …
Transnational governance External links:
School of Transnational Governance
Website governance External links:
Website Governance | Smith College