OCEG
OCEG is a global nonprofit membership organization founded in 2002 that invented the GRC (Governance, Risk, and Compliance) discipline and Principled Performance framework, serving 175,000+ professionals worldwide with open-source standards, integrated certifications, and education.
- Company typePrivate
- Founded2002
- HeadquartersPhoenix, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What OCEG does
OCEG is a global nonprofit membership organization founded in 2002 in Phoenix, Arizona that invented the GRC (Governance, Risk, and Compliance) discipline and the Principled Performance framework. The organization provides open-source standards (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), methodologies (Principled Performance, LeanGRC), and a suite of 5+ professional certifications (GRCP, GRCA, IPMP, IDPP, IAAP) to a community of 175,000+ members across 180+ countries and 3,600+ cities. Its core technology stack consists of a LearnWorlds-based learning management system (learn.oceg.org) with social login integration (Google, Facebook, LinkedIn, Apple, Twitter), an automated unified CPE tracking system where one continuing education experience counts toward multiple certifications simultaneously, and an on-demand resource library of 1,000+ items including webinars, playbooks, eBooks, and research reports.
OCEG's business model is anchored by annual subscription membership: the Pro All Access Pass at $499/year (auto-renewing) or $675 (non-renewing) bundles 5+ certifications, unlimited prep materials, exams, up to 5 retakes, webinars, and automatic CPE tracking; the Starter Membership at $299/year provides basic platform access. Distribution is primarily direct-to-consumer via oceg.org, supplemented by Authorized Training Partners (PwC Academy Middle East, Skillsoft Global Knowledge) for localized in-person and live online training, and direct custom enterprise services (GRC360° Strategy Lab, Team Training Days, LeanGRC advisory) at custom pricing. Pricing is positioned as offering over 90% savings versus competing certification programs that charge separately for prep, exams, retakes, CPE, and maintenance.
The organization operates with a lean core team (1-10 employees) led by Founder & Chair Scott Mitchell and Chief Academic Director Adrian Resag, and has built a Solutions Council of 20+ GRC technology vendors (ServiceNow, Workiva, MetricStream, OneTrust, Archer, Diligent, Optro, ProcessUnity, etc.) that extends its reach into enterprise buyers. OCEG holds NASBA accreditation for CPE credits and is registered as a sponsor of continuing professional education on the National Registry of CPE Sponsors. Strategic content themes include AI in GRC, third-party risk management, operational resilience, and ESG, with the Solutions Council partner network co-presenting webinars on emerging topics.
OCEG firmographics
Firmographics- Name
- OCEG
- Legal name
- OCEG
- Website
- https://oceg.org
- Company type
- Private
- Founded year
- 2002
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- OCEG is a global nonprofit membership organization founded in 2002 that invented the GRC (Governance, Risk, and Compliance) discipline and Principled Performance framework, serving 175,000+ professionals worldwide with open-source standards, integrated certifications, and education.
- Ownership category
- akta.pro rank
Where OCEG is headquartered
LocationHeadquarters
- HQ city
- Phoenix
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
OCEG business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Pro All Access Pass Membership: Annual subscription providing unlimited access to all certifications, preparation materials, courses, exams, up to 5 retakes, exclusive webinars, recordings, automatic CPE tracking, and certification maintenance. Priced at $499/year for the automatically renewing plan or $675 for the non-renewing plan. This is the primary revenue driver.
- Starter Membership: Lower-tier annual subscription providing basic access to the platform and resources, priced at $299/year.
- Authorized Training Partner Revenue: Training partners such as PwC Academy and Skillsoft Global Knowledge charge separate fees for in-person and live online courses delivered in localized languages. OCEG authorizes these partners to deliver OCEG certification preparation courses.
- Custom Training and Events: OCEG offers custom training programs, GRC360 Strategy Lab sessions, workshops, team training days, talk track development workshops, and custom events for enterprise organizations at custom pricing. Also includes LeanGRC advisory and implementation support services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Pro All Access Pass - Annual subscription with all-inclusive access to all certifications, prep materials, courses, exams, retakes, webinars, and CPE tracking |
| Subscription | Multi-year contract | Nonrenewing Pro All Access Pass - All-inclusive access without automatic renewal |
| Subscription | Annual | Starter Membership - Basic annual membership with limited access |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels7 records
OCEG product offering
Product offeringCore offering
OCEG is a global nonprofit organization that provides integrated governance, risk, and compliance (GRC) education, certifications, standards, and resources. Its core offering is the All Access Pass membership at $499/year, which bundles multiple professional certifications (GRCP, GRCA, and others), self-paced courses, open-source frameworks (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), and automated CPE tracking for GRC professionals worldwide.
Product overview
OCEG is a global nonprofit organization offering an integrated education and certification platform for governance, risk, and compliance (GRC) professionals. The core product is the All Access Pass membership (Pro at $499/year, Starter at $299/year) providing unified access to the certification suite (GRCP, GRCA, and specialized certifications), self-study courses (GRC Fundamentals, GRC Audit Fundamentals), open-source standards (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), and over 150 on-demand webinar recordings. The platform is delivered through OCEG Academy (learn.oceg.org) with social login integrations (Google, Facebook, LinkedIn, Apple, Twitter). Additional offerings include GRC360° consulting services (Strategy Lab, Team Training, Launch Workshop), LeanGRC® methodology, and custom training programs. All certifications share a unified CPE maintenance program where continuing education counts toward multiple credentials simultaneously. OCEG holds NASBA accreditation for CPE credits and partners with GRC Certify for certification accreditation.
Differentiator
Problem solved
Functional benefit
Brands
- GRC Professional (GRCP): Professional development and certification covering governance, strategy, risk, compliance, audit, and security disciplines
- GRC Auditor (GRCA)
- Principled Performance
- GRC Capability Model (Red Book)
- GRC Assessment Framework (Burgundy Book)
- GRC360
- LeanGRC
- GRC360 Strategy Lab
- EventDay and ActiveLearning Methods
Products and services
- OCEG All Access Pass (Pro Membership) Annual subscription at $499/year providing unified access to 5+ OCEG certifications, unlimited prep materials and courses, all certification exams, up to 5 retakes without fee, exclusive webinars, recordings, videos, and automatically tracked CPEs for certification maintenance. Designed for GRC professionals working in governance, strategy, risk, compliance, audit, and security roles.
- GRC Professional (GRCP) Certification Foundational certification credential validating understanding and application of the GRC Capability Model across governance, strategy, risk, compliance, audit, and security disciplines to achieve Principled Performance. Available to GRC professionals at any career stage.
- GRC Auditor (GRCA) Certification Advanced certification validating ability to audit and provide assurance on GRC activities spanning governance, strategy, risk, compliance, ethics, security, privacy, and internal control. Builds on GRCP knowledge for assurance professionals.
- GRC Fundamentals Course Self-paced online course teaching the GRC Capability Model as part of the GRCP Certification Program. Delivered through OCEG Academy (learn.oceg.org) and available with the All Access Pass.
- GRC Audit Fundamentals Course Advanced self-paced course building on GRCP knowledge, teaching how to provide assurance on GRC activities and preparing candidates for the GRCA certification exam. Delivered through OCEG Academy.
- GRC Capability Model (Red Book) Open-source standard providing the essential body of knowledge for GRC, including frameworks, models, and methods for planning, assessing, and improving GRC capabilities across organizations.
- GRC Assessment Framework (Burgundy Book) Standard framework containing the essential body of knowledge, procedures, and tools for auditing and assessing the GRC Capability Model within organizations.
- Webinar Recordings Library Library of 150+ on-demand webinar recordings covering GRC topics (AI in GRC, TPRM, operational resilience, audit, ethics, ESG). Recordings are automatically tracked for CPE credit for All Access Pass holders.
- GRC360° Strategy Lab Facilitated strategic planning engagement delivered at OCEG offices in Arizona, helping organizations design or refine their GRC integration strategies. Targeted at enterprise GRC leaders and teams.
- LeanGRC® Business process improvement methodology that applies lean principles to GRC activities to eliminate non-value-added steps, including advisory, strategy lab sessions, and implementation support for enterprise clients.
- GRC360° Team Training Day On-site interactive workshop providing customized team training on GRC principles, delivered to client teams at their locations or at OCEG offices.
- GRC360° Launch Workshop Two-day customized workshop helping organizations build strategic plans, GRC charters, and key development steps for launching or refreshing GRC programs.
- Custom Training & Cohorts Customized training programs and cohort-based learning experiences designed for specific organizational teams, built around OCEG certifications and courses for enterprise clients.
Quantifiable outcome
- Over 98% of OCEG members recommend certification as the fastest way to master GRC
- +2 more outcomes
Companies that use OCEG
Customer profileNamed customers6 records
Segments4 records
Ideal customer profiles4 records
OCEG technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability6 records
Feature6 records
OCEG partnerships and signals
Strategic signalPartnerships
23 partnerships are on record, tiered core and minor.
- PwC Academy - Middle EastcorePwC Academy is one of the largest training providers across the Middle East with over a decade of experience developing professionals from early career to business leaders. Offers OCEG GRC certification preparation courses in English in the UAE and Saudi Arabia. Courses are available both in-person and online.
- Skillsoft Global KnowledgecoreGlobal Knowledge is a worldwide leader in IT and technology training with international offices and training facilities across over 100 countries. In June 2021, Global Knowledge merged with Skillsoft to create the world's leading corporate learning company. Offers OCEG GRC certification preparation courses online and in classrooms through a worldwide partner network.
- AravominorSolutions Council Member. Aravo provides third-party risk management and supplier compliance solutions. Participates in the OCEG Solutions Council to contribute to the GRC ecosystem.
- ArcherminorSolutions Council Member. Archer provides integrated risk management and governance, risk, and compliance solutions. Participates in the OCEG Solutions Council.
- CorporaterminorSolutions Council Member. Corporater provides cloud-based enterprise management solutions including GRC and performance management.
- DiligentminorSolutions Council Member. Diligent provides governance, risk, and compliance software solutions for boards and executive teams.
- DocTractminorSolutions Council Member. DocTract provides document management and policy management solutions for GRC.
- FastpathminorSolutions Council Member. Fastpath provides automated compliance and audit management solutions.
- Fusion Risk ManagementminorSolutions Council Member. Fusion Risk Management provides operational resilience and risk management solutions. Co-sponsors OCEG webinars on resilience and operational continuity.
- GRC 20/20 ResearchminorSolutions Council Member. GRC 20/20 Research is a GRC analyst firm that provides research and advisory services on GRC technology and strategy.
- Infinity Data AIminorSolutions Council Member. Infinity Data AI co-presents OCEG webinars on AI and GRC data governance topics.
- MetricStreamminorSolutions Council Member. MetricStream provides enterprise GRC, risk management, and compliance software solutions.
- MitratechminorSolutions Council Member. Mitratech provides legal, compliance, and GRC software solutions for enterprises. Co-sponsors OCEG research and webinars.
- MonitaurminorSolutions Council Member. Monitaur provides AI governance and GRC solutions. Co-presents OCEG webinars on AI GRC.
- OneTrustminorSolutions Council Member. OneTrust provides privacy, security, and governance technology solutions.
- OptrominorSolutions Council Member. Optro (previously AuditBoard) provides SaaS-based audit, risk, and compliance solutions. Co-sponsors OCEG webinars on AI in GRC and audit.
- Origami RiskminorSolutions Council Member. Origami Risk provides risk management and insurance software solutions. Co-presents OCEG webinars on risk visualization and bowtie modeling.
- ProcessUnityminorSolutions Council Member. ProcessUnity provides third-party risk management and GRC solutions. Co-sponsors OCEG webinars on TPRM and AI in risk management.
- ProtechtminorSolutions Council Member. Protecht provides risk management and compliance solutions. Co-presents OCEG webinars on risk appetite and ERM.
- RiskonnectminorSolutions Council Member. Riskonnect provides integrated risk management solutions. Co-sponsors OCEG webinars on operational resilience and third-party risk.
- ServiceNowminorSolutions Council Member. ServiceNow provides enterprise workflow automation including GRC and risk management capabilities on its platform.
- SureStepminorSolutions Council Member. SureStep provides GRC and risk management solutions and consulting services.
- WorkivaminorSolutions Council Member. Workiva provides cloud-based platform for financial management, GRC, and ESG reporting. Co-sponsors OCEG webinars on AI governance and internal audit.
Scale indicators8 records
Recent moves6 records
Expansion highlights6 records
OCEG competitors and assessment
Company assessmentEmerging players
- Compliance Week: Compliance Week is an emerging media, training, and events business serving GRC and compliance professionals with certifications, webinars, and conferences. Comparable to OCEG because it monetizes continuing education and certification content for the same target audience.
- GRC 20/20 Research: GRC 20/20 Research is an emerging GRC analyst firm that produces research, advisory, and education content for GRC buyers and practitioners. It is a peer as both an OCEG Solutions Council member and a competitor for GRC professional mindshare.
Broad incumbents
- Skillsoft: Skillsoft (now including Global Knowledge, an OCEG Authorized Training Partner) is a broad incumbent in corporate learning, offering a much larger content catalog across technology, leadership, and compliance. It competes for enterprise L&D budgets and is simultaneously an OCEG distribution channel.
- PwC Academy: PwC Academy is a broad incumbent in professional training and an OCEG Authorized Training Partner delivering GRC certification prep across the Middle East. Comparable because both sell instructor-led professional certification training to enterprises and individuals.
- Coursera: Coursera is a broad incumbent MOOC platform offering professional certificates and specializations across GRC, compliance, and risk from universities and companies. It competes for the same self-paced professional upskilling dollars that OCEG targets with its All Access Pass.
Direct peers
- ISACA: ISACA is a direct peer offering professional certifications (CISA, CISM, CRISC, CGEIT) and training for GRC, audit, and cybersecurity professionals. Both compete for the same GRC practitioner's certification budget and CPE hours, with OCEG positioned as more integrated across disciplines and ISACA as more established in security and IT audit.
- The IIA (Institute of Internal Auditors): The IIA is a direct peer offering the CIA (Certified Internal Auditor) credential and GRC-related training for audit professionals. It competes directly with OCEG's GRCA certification and shares much of the same target buyer: audit, risk, and compliance leaders seeking CPE-bearing credentials.
- AICPA: AICPA offers the CPA, CISA (Certified Information Systems Auditor), and CGMA credentials, serving overlapping audiences of finance, risk, and audit professionals. It is a direct peer for the certification-maintenance and continuing professional education of GRC practitioners.
- (ISC)²: (ISC)² is a direct peer offering CISSP, CCSP, and other security and governance certifications that compete for the same enterprise security/GRC professional's certification budget and CPE hours.
- SAI Global: SAI Global (now SAI360) offers GRC, compliance, and risk management training and certifications, including learning paths for auditors and compliance officers. It is a direct peer combining GRC software with education and certification services targeting the same practitioners.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
OCEG social profiles
Digital presenceOCEG compliance and trust
Trust signalCompliance1 record
OCEG financial estimates
Financial estimateRevenue estimate
Valuation estimate
OCEG leadership team
Management profileNumber of profiles
Profiles3 records
OCEG funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
OCEG M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about OCEG
What does OCEG do?
OCEG is a global nonprofit organization that provides integrated governance, risk, and compliance (GRC) education, certifications, standards, and resources. Its core offering is the All Access Pass membership at $499/year, which bundles multiple professional certifications (GRCP, GRCA, and others), self-paced courses, open-source frameworks (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), and automated CPE tracking for GRC professionals worldwide.
Is OCEG a public or private company?
OCEG is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was OCEG founded?
OCEG was founded in 2002. It employs 1 to 10 people.
Where is OCEG based?
OCEG is headquartered in Phoenix, United States, in the North America region.
How does OCEG make money?
Four revenue lines are on record. Pro All Access Pass Membership is the primary driver. The others are starter Membership, authorized Training Partner Revenue and custom Training and Events.
Who are OCEG's main competitors?
Emerging players on record are Compliance Week and GRC 20/20 Research. Broad incumbents are Skillsoft, PwC Academy and Coursera. Direct peers are ISACA, The IIA (Institute of Internal Auditors), AICPA, (ISC)² and SAI Global.
Does OCEG have an API?
No public API is recorded for OCEG.