 Although interpreted differently in various organizations, GRC typically encompasses activities such as corporate governance, enterprise risk management (ERM) and corporate compliance with applicable laws and regulations.Organizations reach a size where coordinated control over GRC activities is required to operate effectively.Each of these three disciplines creates information of value to the other two, and all three impact the same technologies, people, processes and information.