Governance: who decides what, with what authority, against what policy.
Risk: identify, score (likelihood × impact), respond (accept, mitigate, transfer, avoid), monitor.
Compliance: evidence that controls operate as designed.
Lesson 3 of 412 min
GRC (Governance, Risk and Compliance) — Governance, Risk, Compliance
Governance sets direction. Risk informs trade-offs. Compliance proves it.
Key takeaways
- ▸Governance = decision rights
- ▸Risk = likelihood × impact
- ▸Compliance is the evidence trail