 If the production team will be audited by CIA using an application that production also has access to, is thought to reduce risk more quickly as the end goal is not to be 'compliant' but to be 'secure,' or as secure as possible.Point solutions to GRC are marked by their focus on addressing only one of its areas.In some cases of limited requirements, these solutions can serve a viable purpose.