Consult2Comply's methodology is focused on a clients core business and how it relates to recommended or required regulations, standards and best practices. Our methodology examines existing policy and makes recommendations on how the policy can be created, changed, adapted to ensure compliance is being conducted in the appropriate way. Compliance strategies and solutions need to be sustainable, with constant monitoring, measuring and management. This is the overiding theme of our process and methodology.

To help explain how it works, its important to understand how Governance, Risk and Compliance Management should be interpreted in any organization. Our methodology provides a view of what should be included in an overall compliance strategy. It is designed to help organizations understand how to determine what initiatives they should consider supporting to derive the greatest business value from their efforts.

Each layer of the model has three specific activities that complement each other and will help the organization understand GRC and their compliance landscape in a practical way. Following this model and methodology helps ensure an effective strategy is created.


The C2C methodology helps create compliance strategies and solutions to manage diverse and compliance enabled environments. C2C methodology creates and allocates responsibilities for the compliance framework. The compliance framework includes applicable and known regulations, risk scenarios, standards alignment, best practices, policy mapping, procedure controls, record management and capturing other business-supporting activities to gain an overall view and complete understanding of the business.

This ensures that any organization will be able to:

• Understand the existing compliance landscape
• Have a cohesive strategy including mappings of policies to regulations, standards and best practices
• Assign responsibilities to appropriate personnel with monitoring, measuring and managing
• Align with actual regulations, standards and best practices
• Ensure Compliance initiatives are corporate and not siloed
• Involve all stakeholders in the process
• Assess and audit on a regular basis
• Make adjustments where necessary
• Continuously improve process