Unfortunately, there seems to be a lack of understanding of what GRC really is.  Contrary to popular belief GRC is NOT ERM, but 3 separate disciplines Governance, Risk and Compliance. Here I look at the neglected Governance component. Continue reading →