Where Policy Management Fits in the GRC Ecosystem

Key Takeaways

• GRC is the integrated collection of capabilities that enable an organization to achieve objectives and address uncertainty
• Policies are critical to all elements of GRC for the organization
• Defining appropriate policies requires understanding the current and changing contexts of the organization