GRC
Governance, Risk, and Compliance
GRC is the integrated framework organizations use to align cybersecurity strategy with business goals, manage risk, and satisfy regulatory requirements. It unifies policies, processes, and technology under one discipline.
Cómo se usa en ciberseguridad
Cybersecurity teams use GRC programs to map controls to regulatory mandates and track risk across the organization. GRC analysts build policy libraries, run control assessments, and report risk posture to leadership. Platforms like RSA Archer, ServiceNow GRC, and OneTrust automate much of this workflow.
Término relacionado en el glosario: governance risk and compliance
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.