Governance, Risk and Compliance (GRC)

Governance, risk, and compliance (GRC) is the process of ensuring that an organization's information technology systems meet legal and regulatory requirements. Examples include developing policies and procedures for information security, data privacy, system availability, and other IT-related issues. GRC also includes monitoring effectiveness and tracking any risks or problems that could affect system safety or security.

What Small and Midsize Businesses Need to Know About Governance, Risk and Compliance (GRC)

Businesses can use GRC to help protect themselves from potential fines or lawsuits resulting from a breach of data privacy or another IT-related issue. All employees must know these policies and procedures and how to follow them at work, even if they're not directly involved in the implementation process itself.

Related terms