OCEG

What OCEG does

OCEG is a global nonprofit membership organization founded in 2002 in Phoenix, Arizona that invented the GRC (Governance, Risk, and Compliance) discipline and the Principled Performance framework. The organization provides open-source standards (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), methodologies (Principled Performance, LeanGRC), and a suite of 5+ professional certifications (GRCP, GRCA, IPMP, IDPP, IAAP) to a community of 175,000+ members across 180+ countries and 3,600+ cities. Its core technology stack consists of a LearnWorlds-based learning management system (learn.oceg.org) with social login integration (Google, Facebook, LinkedIn, Apple, Twitter), an automated unified CPE tracking system where one continuing education experience counts toward multiple certifications simultaneously, and an on-demand resource library of 1,000+ items including webinars, playbooks, eBooks, and research reports.

OCEG's business model is anchored by annual subscription membership: the Pro All Access Pass at $499/year (auto-renewing) or $675 (non-renewing) bundles 5+ certifications, unlimited prep materials, exams, up to 5 retakes, webinars, and automatic CPE tracking; the Starter Membership at $299/year provides basic platform access. Distribution is primarily direct-to-consumer via oceg.org, supplemented by Authorized Training Partners (PwC Academy Middle East, Skillsoft Global Knowledge) for localized in-person and live online training, and direct custom enterprise services (GRC360° Strategy Lab, Team Training Days, LeanGRC advisory) at custom pricing. Pricing is positioned as offering over 90% savings versus competing certification programs that charge separately for prep, exams, retakes, CPE, and maintenance.

The organization operates with a lean core team (1-10 employees) led by Founder & Chair Scott Mitchell and Chief Academic Director Adrian Resag, and has built a Solutions Council of 20+ GRC technology vendors (ServiceNow, Workiva, MetricStream, OneTrust, Archer, Diligent, Optro, ProcessUnity, etc.) that extends its reach into enterprise buyers. OCEG holds NASBA accreditation for CPE credits and is registered as a sponsor of continuing professional education on the National Registry of CPE Sponsors. Strategic content themes include AI in GRC, third-party risk management, operational resilience, and ESG, with the Solutions Council partner network co-presenting webinars on emerging topics.

Name

OCEG

Legal name

OCEG

Website

https://oceg.org

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

1–10 employees

Short description

OCEG is a global nonprofit membership organization founded in 2002 that invented the GRC (Governance, Risk, and Compliance) discipline and Principled Performance framework, serving 175,000+ professionals worldwide with open-source standards, integrated certifications, and education.

Ownership category

akta.pro rank

Headquarters

HQ city

Phoenix

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Pro All Access Pass Membership: Annual subscription providing unlimited access to all certifications, preparation materials, courses, exams, up to 5 retakes, exclusive webinars, recordings, automatic CPE tracking, and certification maintenance. Priced at $499/year for the automatically renewing plan or $675 for the non-renewing plan. This is the primary revenue driver.
2. Starter Membership: Lower-tier annual subscription providing basic access to the platform and resources, priced at $299/year.
3. Authorized Training Partner Revenue: Training partners such as PwC Academy and Skillsoft Global Knowledge charge separate fees for in-person and live online courses delivered in localized languages. OCEG authorizes these partners to deliver OCEG certification preparation courses.
4. Custom Training and Events: OCEG offers custom training programs, GRC360 Strategy Lab sessions, workshops, team training days, talk track development workshops, and custom events for enterprise organizations at custom pricing. Also includes LeanGRC advisory and implementation support services.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels7 records

Core offering

OCEG is a global nonprofit organization that provides integrated governance, risk, and compliance (GRC) education, certifications, standards, and resources. Its core offering is the All Access Pass membership at $499/year, which bundles multiple professional certifications (GRCP, GRCA, and others), self-paced courses, open-source frameworks (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), and automated CPE tracking for GRC professionals worldwide.

Product overview

OCEG is a global nonprofit organization offering an integrated education and certification platform for governance, risk, and compliance (GRC) professionals. The core product is the All Access Pass membership (Pro at $499/year, Starter at $299/year) providing unified access to the certification suite (GRCP, GRCA, and specialized certifications), self-study courses (GRC Fundamentals, GRC Audit Fundamentals), open-source standards (GRC Capability Model/Red Book, GRC Assessment Framework/Burgundy Book), and over 150 on-demand webinar recordings. The platform is delivered through OCEG Academy (learn.oceg.org) with social login integrations (Google, Facebook, LinkedIn, Apple, Twitter). Additional offerings include GRC360° consulting services (Strategy Lab, Team Training, Launch Workshop), LeanGRC® methodology, and custom training programs. All certifications share a unified CPE maintenance program where continuing education counts toward multiple credentials simultaneously. OCEG holds NASBA accreditation for CPE credits and partners with GRC Certify for certification accreditation.

Differentiator

Problem solved

Functional benefit

Brands

• GRC Professional (GRCP): Professional development and certification covering governance, strategy, risk, compliance, audit, and security disciplines
• GRC Auditor (GRCA)
• Principled Performance
• GRC Capability Model (Red Book)
• GRC Assessment Framework (Burgundy Book)
• GRC360
• LeanGRC
• GRC360 Strategy Lab
• EventDay and ActiveLearning Methods

Products and services

• OCEG All Access Pass (Pro Membership) Annual subscription at $499/year providing unified access to 5+ OCEG certifications, unlimited prep materials and courses, all certification exams, up to 5 retakes without fee, exclusive webinars, recordings, videos, and automatically tracked CPEs for certification maintenance. Designed for GRC professionals working in governance, strategy, risk, compliance, audit, and security roles.
• GRC Professional (GRCP) Certification Foundational certification credential validating understanding and application of the GRC Capability Model across governance, strategy, risk, compliance, audit, and security disciplines to achieve Principled Performance. Available to GRC professionals at any career stage.
• GRC Auditor (GRCA) Certification Advanced certification validating ability to audit and provide assurance on GRC activities spanning governance, strategy, risk, compliance, ethics, security, privacy, and internal control. Builds on GRCP knowledge for assurance professionals.
• GRC Fundamentals Course Self-paced online course teaching the GRC Capability Model as part of the GRCP Certification Program. Delivered through OCEG Academy (learn.oceg.org) and available with the All Access Pass.
• GRC Audit Fundamentals Course Advanced self-paced course building on GRCP knowledge, teaching how to provide assurance on GRC activities and preparing candidates for the GRCA certification exam. Delivered through OCEG Academy.
• GRC Capability Model (Red Book) Open-source standard providing the essential body of knowledge for GRC, including frameworks, models, and methods for planning, assessing, and improving GRC capabilities across organizations.
• GRC Assessment Framework (Burgundy Book) Standard framework containing the essential body of knowledge, procedures, and tools for auditing and assessing the GRC Capability Model within organizations.
• Webinar Recordings Library Library of 150+ on-demand webinar recordings covering GRC topics (AI in GRC, TPRM, operational resilience, audit, ethics, ESG). Recordings are automatically tracked for CPE credit for All Access Pass holders.
• GRC360° Strategy Lab Facilitated strategic planning engagement delivered at OCEG offices in Arizona, helping organizations design or refine their GRC integration strategies. Targeted at enterprise GRC leaders and teams.
• LeanGRC® Business process improvement methodology that applies lean principles to GRC activities to eliminate non-value-added steps, including advisory, strategy lab sessions, and implementation support for enterprise clients.
• GRC360° Team Training Day On-site interactive workshop providing customized team training on GRC principles, delivered to client teams at their locations or at OCEG offices.
• GRC360° Launch Workshop Two-day customized workshop helping organizations build strategic plans, GRC charters, and key development steps for launching or refreshing GRC programs.
• Custom Training & Cohorts Customized training programs and cohort-based learning experiences designed for specific organizational teams, built around OCEG certifications and courses for enterprise clients.

Quantifiable outcome

• Over 98% of OCEG members recommend certification as the fastest way to master GRC
• +2 more outcomes

Named customers6 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability6 records

Feature6 records

Partnerships

23 partnerships are on record, tiered core and minor.

• PwC Academy - Middle EastcoreChannel Partner/ Reseller/ DistributorPwC Academy is one of the largest training providers across the Middle East with over a decade of experience developing professionals from early career to business leaders. Offers OCEG GRC certification preparation courses in English in the UAE and Saudi Arabia. Courses are available both in-person and online.
• Skillsoft Global KnowledgecoreChannel Partner/ Reseller/ DistributorGlobal Knowledge is a worldwide leader in IT and technology training with international offices and training facilities across over 100 countries. In June 2021, Global Knowledge merged with Skillsoft to create the world's leading corporate learning company. Offers OCEG GRC certification preparation courses online and in classrooms through a worldwide partner network.
• AravominorGTM or Marketing PartnerSolutions Council Member. Aravo provides third-party risk management and supplier compliance solutions. Participates in the OCEG Solutions Council to contribute to the GRC ecosystem.
• ArcherminorGTM or Marketing PartnerSolutions Council Member. Archer provides integrated risk management and governance, risk, and compliance solutions. Participates in the OCEG Solutions Council.
• CorporaterminorGTM or Marketing PartnerSolutions Council Member. Corporater provides cloud-based enterprise management solutions including GRC and performance management.
• DiligentminorGTM or Marketing PartnerSolutions Council Member. Diligent provides governance, risk, and compliance software solutions for boards and executive teams.
• DocTractminorGTM or Marketing PartnerSolutions Council Member. DocTract provides document management and policy management solutions for GRC.
• FastpathminorGTM or Marketing PartnerSolutions Council Member. Fastpath provides automated compliance and audit management solutions.
• Fusion Risk ManagementminorGTM or Marketing PartnerSolutions Council Member. Fusion Risk Management provides operational resilience and risk management solutions. Co-sponsors OCEG webinars on resilience and operational continuity.
• GRC 20/20 ResearchminorGTM or Marketing PartnerSolutions Council Member. GRC 20/20 Research is a GRC analyst firm that provides research and advisory services on GRC technology and strategy.
• Infinity Data AIminorGTM or Marketing PartnerSolutions Council Member. Infinity Data AI co-presents OCEG webinars on AI and GRC data governance topics.
• MetricStreamminorGTM or Marketing PartnerSolutions Council Member. MetricStream provides enterprise GRC, risk management, and compliance software solutions.
• MitratechminorGTM or Marketing PartnerSolutions Council Member. Mitratech provides legal, compliance, and GRC software solutions for enterprises. Co-sponsors OCEG research and webinars.
• MonitaurminorGTM or Marketing PartnerSolutions Council Member. Monitaur provides AI governance and GRC solutions. Co-presents OCEG webinars on AI GRC.
• OneTrustminorGTM or Marketing PartnerSolutions Council Member. OneTrust provides privacy, security, and governance technology solutions.
• OptrominorGTM or Marketing PartnerSolutions Council Member. Optro (previously AuditBoard) provides SaaS-based audit, risk, and compliance solutions. Co-sponsors OCEG webinars on AI in GRC and audit.
• Origami RiskminorGTM or Marketing PartnerSolutions Council Member. Origami Risk provides risk management and insurance software solutions. Co-presents OCEG webinars on risk visualization and bowtie modeling.
• ProcessUnityminorGTM or Marketing PartnerSolutions Council Member. ProcessUnity provides third-party risk management and GRC solutions. Co-sponsors OCEG webinars on TPRM and AI in risk management.
• ProtechtminorGTM or Marketing PartnerSolutions Council Member. Protecht provides risk management and compliance solutions. Co-presents OCEG webinars on risk appetite and ERM.
• RiskonnectminorGTM or Marketing PartnerSolutions Council Member. Riskonnect provides integrated risk management solutions. Co-sponsors OCEG webinars on operational resilience and third-party risk.
• ServiceNowminorGTM or Marketing PartnerSolutions Council Member. ServiceNow provides enterprise workflow automation including GRC and risk management capabilities on its platform.
• SureStepminorGTM or Marketing PartnerSolutions Council Member. SureStep provides GRC and risk management solutions and consulting services.
• WorkivaminorGTM or Marketing PartnerSolutions Council Member. Workiva provides cloud-based platform for financial management, GRC, and ESG reporting. Co-sponsors OCEG webinars on AI governance and internal audit.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Emerging players

• Compliance Week: Compliance Week is an emerging media, training, and events business serving GRC and compliance professionals with certifications, webinars, and conferences. Comparable to OCEG because it monetizes continuing education and certification content for the same target audience.
• GRC 20/20 Research: GRC 20/20 Research is an emerging GRC analyst firm that produces research, advisory, and education content for GRC buyers and practitioners. It is a peer as both an OCEG Solutions Council member and a competitor for GRC professional mindshare.

Broad incumbents

• Skillsoft: Skillsoft (now including Global Knowledge, an OCEG Authorized Training Partner) is a broad incumbent in corporate learning, offering a much larger content catalog across technology, leadership, and compliance. It competes for enterprise L&D budgets and is simultaneously an OCEG distribution channel.
• PwC Academy: PwC Academy is a broad incumbent in professional training and an OCEG Authorized Training Partner delivering GRC certification prep across the Middle East. Comparable because both sell instructor-led professional certification training to enterprises and individuals.
• Coursera: Coursera is a broad incumbent MOOC platform offering professional certificates and specializations across GRC, compliance, and risk from universities and companies. It competes for the same self-paced professional upskilling dollars that OCEG targets with its All Access Pass.

Direct peers

• ISACA: ISACA is a direct peer offering professional certifications (CISA, CISM, CRISC, CGEIT) and training for GRC, audit, and cybersecurity professionals. Both compete for the same GRC practitioner's certification budget and CPE hours, with OCEG positioned as more integrated across disciplines and ISACA as more established in security and IT audit.
• The IIA (Institute of Internal Auditors): The IIA is a direct peer offering the CIA (Certified Internal Auditor) credential and GRC-related training for audit professionals. It competes directly with OCEG's GRCA certification and shares much of the same target buyer: audit, risk, and compliance leaders seeking CPE-bearing credentials.
• AICPA: AICPA offers the CPA, CISA (Certified Information Systems Auditor), and CGMA credentials, serving overlapping audiences of finance, risk, and audit professionals. It is a direct peer for the certification-maintenance and continuing professional education of GRC practitioners.
• (ISC)²: (ISC)² is a direct peer offering CISSP, CCSP, and other security and governance certifications that compete for the same enterprise security/GRC professional's certification budget and CPE hours.
• SAI Global: SAI Global (now SAI360) offers GRC, compliance, and risk management training and certifications, including learning paths for auditors and compliance officers. It is a direct peer combining GRC software with education and certification services targeting the same practitioners.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/oceg
• Facebookfacebook.com/oceg360
• LinkedInlinkedin.com/company/216145

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about OCEG