Governance, risk and compliance · Question 9 of 12
What advantages does an integrated GRC approach bring?
2 answers are correct. Medium
Show answer
Answer
- B Less duplicated work on controls
- D A shared picture of the situation for everyone involved
Explanation
Many requirements call for similar controls, such as access control in ISO/IEC 27001, PCI DSS and NIS2. A GRC approach maps one control to all requirements and thus saves effort. At the same time, everyone involved sees the same data on risks and evidence. GRC alone does not prevent incidents.