 The organisation's risk appetite, its internal policies and external regulations constitute the "rules" of GRC.The disciplines, their components and rules are now to be merged in an integrated, holistic and organisation-wide (the three main "characteristics" of GRC) manner – aligned with the (business) operations that are managed and supported through GRC.In applying this approach, organisations long to achieve the "objectives"