CGIC case studies
CGIC · Put your knowledge to work in context.
The Certified in Governance, Risk and Compliance (CGIC) is a professional credential aimed at practitioners who build and run the control environment of an organisation: the policies and oversight structures that direct it, the risk processes that anticipate what could go wrong, the compliance programmes that keep it inside its legal and regulatory obligations, and the assurance work that tests whether any of it actually functions. It suits compliance officers, risk analysts, internal auditors, governance and company-secretarial staff, and consultants moving into an integrated GRC role, particularly those who currently specialise in one pillar and need fluency across all four. The CGIC case studies are 5 cases and about 2,582 words.
1The Whistleblower Who Skipped the Line
You are the company secretary of a mid-sized logistics firm. A junior finance analyst emails you directly, bypassing her manager and the head of internal audit, alleging that the CFO has been capitalising maintenance costs to flatter EBITDA ahead of a bank covenant test.
509 words, about 3 min2The Vendor Who Passed the Audit
You lead internal audit at a payments processor. Your team has just issued an unqualified opinion on the vendor-management process.
512 words, about 3 min3The Gift That Fits the Policy
A procurement manager at a public-sector-adjacent contractor is negotiating a £4m framework renewal. A bidder sends a hamper worth about £180 to the manager's home address, addressed to 'the family', with a note thanking them for 'hospitality at the conference'.
490 words, about 2 min4The Risk Register Nobody Owns
You are the risk lead at a 900-person insurer. The board risk committee has just been told that the top enterprise risk - a legacy policy-administration system - is rated 'high' with a 'medium' residual after controls.
496 words, about 2 min5The Audit That Found Too Much
You chair the audit committee of a charity with £30m annual income. Internal audit reports 'significant' deficiencies in grant-expenditure verification: 12% of sampled grants lacked supporting evidence, and one £250k grant to a partner organisation was disbursed before the partnership agreement was signed.
575 words, about 3 min