Risk and compliance are among the top issues executives feel least prepared to address. Part of the reason is attributed to the fact that with limited resources and compliance deadlines looming, organizations often find themselves overwhelmed by the demands of new and changing regulatory requirements. But the problem is also that they do not really know what GRC (Governance, Risk and Compliance) is and how the acronym can fit into their processes.