Acronym for Governance, Risk, and Compliance—integrated management of these interconnected disciplines.
GRC stands for Governance, Risk, and Compliance. See 'Governance, Risk, and Compliance' for the full definition. GRC platforms are software tools supporting integrated management of these functions.
Why It Matters
The DSC Perspective:
GRC provides the framework for managing security and compliance strategically rather than reactively. Consider GRC as your programme matures beyond basic controls.