CSO’s State of the CSO survey respondents have said they will spend an increasing amount of time on regulatory compliance work. GRC can inform and work hand-in-glove with the broad Enterprise Risk Management initiatives of which I am an unabashed fan and cheerleader. The C (compliance) aspect is more mature than the G and the R, but the attempt to measure and mitigate Risk through better Governance is where the greater value of these efforts ultimately will lie. GRC implementations work when they are built on a solid foundation of intelligent organization.”]
Source: https://www.csoonline.com/article/2132138/pulling-it-all-together–a-special-report-on-grc.html