| Definition |
Governance, Risk, and Compliance (GRC) is an Enterprise security concept used to manage identity, access, audit, risk, privacy, compliance, and protection across applications and systems.
|
| Context & Usage |
Security, audit, and architecture teams use this concept to protect applications and data while satisfying access, compliance, and risk requirements.
Related concepts include Enterprise Architecture, Application Portfolio, Business Capability and Data Governance.
Additional Resource: NIST Computer Security Resource Center Glossary.
|
| Categories |
Web, Database, Cloud, and DevOps Technologies, Cybersecurity, Compliance, and Access Management, Enterprise Applications, CRM, and Contact Center Systems
|