Governance Risk Control Architecture (GRCA): An Executable Governance System Model for Decision-Driven Risk Intelligence and Lifecycle-Based Control Systems

This working paper introduces the Enterprise Governance Intelligence Architecture (EGIA), a conceptual framework addressing the structural separation of Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), and Key Control Indicators (KCIs) in enterprise governance reporting. Rather than treating these as three independent measurement tracks, EGIA defines an integration logic in which performance, risk exposure, and control effectiveness are read as interdependent expressions of a single governance state, positioned against COSO ERM (2017), ISO 31000:2018, and the OECD Principles of Corporate Governance. The paper identifies spurious correlation as the principal methodological risk of any such integration and proposes procedural safeguards to control it. EGIA is presented as a conceptual proposal requiring empirical pilot testing and independent validation, not a confirmed methodology.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-07-02
DOI
https://doi.org/10.5281/zenodo.21128773
Primary Topic
Information Technology Governance and Strategy
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Governance Risk Control Architecture (GRCA): An Executable Governance System Model for Decision-Driven Risk Intelligence and Lifecycle-Based Control Systems

Melhem Salloum
Zenodo (CERN European Organization for Nuclear Research)
Information Technology Governance and Strategy
article

Governance Risk Control Architecture (GRCA): An Executable Governance System Model for Decision-Driven Risk Intelligence and Lifecycle-Based Control Systems

Melhem Salloum
article en

Abstract

This working paper introduces the Enterprise Governance Intelligence Architecture (EGIA), a conceptual framework addressing the structural separation of Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), and Key Control Indicators (KCIs) in enterprise governance reporting. Rather than treating these as three independent measurement tracks, EGIA defines an integration logic in which performance, risk exposure, and control effectiveness are read as interdependent expressions of a single governance state, positioned against COSO ERM (2017), ISO 31000:2018, and the OECD Principles of Corporate Governance. The paper identifies spurious correlation as the principal methodological risk of any such integration and proposes procedural safeguards to control it. EGIA is presented as a conceptual proposal requiring empirical pilot testing and independent validation, not a confirmed methodology.

Zenodo (CERN European Organization for Nuclear Research)
Peace, Justice and strong institutions
Openalex Percentile: Top 5%
Information Technology Governance and Strategy
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.