The distinction between "Change the Organization" (CTO) and "Run the Organization" (RTO) objectives is fundamental to integrated GRC. CTO objectives are forward-looking and focus on initiatives, projects, and transformations designed to create new value, enhance capabilities, or improve performance. In contrast, RTO objectives concern the ongoing, day-to-day business operations. Their primary focus is on maintaining established service levels, ensuring business continuity, and preserving the existing value the organization delivers to its stakeholders. This separation helps organizations balance innovation with operational stability and allocate resources and manage risks appropriately for each category.

A: Both CTO and RTO objectives should be based on objective, measurable metrics where possible; this is not a valid differentiator.

B: Both objective types are relevant across the organization, not just to specific change management or operational roles.

D: Objective setting is a cascaded process; both CTO and RTO objectives are established at strategic, tactical, and operational levels.

1. OCEG, "GRC Capability Model," Version 3.5, (2021). Section 2.2.1, "Set Objectives," Page 38. The text states, "One useful way is to distinguish between those that relate to improving the organization (sometimes called ‘change the organization’ or CTO objectives) and those that relate to ongoing performance of the organization (sometimes called ‘run the organization’ or RTO objectives)." It clarifies that CTO addresses making the organization better, while RTO addresses keeping it running effectively.