Just what is GRC? Please share your definition
This morning, I read about yet another conference on GRC. I have seen a “GRC Summit”, “GRC Conference”, and a conference to discuss moving from “SOX to GRC”.
I read about people saying we need a “GRC program”, a “GRC organization”, a “GRC platform”, and so on.
Others say that GRC is a meaningless term, just vendor hype to sell services and products.
As you know, I advocate the OCEG definition of GRC and explained my views in this post.
But what do you think? Please share with us all your brief explanation of what GRC means to you. How would you explain it to your CEO?
PS – if you prefer to comment in another forum, such as a LinkedIn group, please put it here so more people can view it. I will do so for you if necessary, so everybody from all groups can see all comments.