What is governance, risk management and compliance?

Governance, risk management and compliance (GRC) refers to an organization’s strategy for dealing with the interdependencies between 3 factors listed below:

• Governance: The ethical management of an organization by its leaders in accordance with approved business plans and strategies.
• Risk management: The process by which an organization identifies, categorizes, assesses, and implements strategies to minimize risks that would impede operations and control risks that would improve operations.
• Compliance: It refers to an organization’s level of adherence to the standards, regulations, and best practices mandated by the business as well as relevant governing bodies and laws.