GRC is not really about precisely defining the term GRC, nor is it about dissecting the “G,” the “R” and the “C,” according to Lee Dittmar, principal, Deloitte Consulting LLP. It is about bringing governance, risk and compliance activities together and approaching them holistically.

Historically, most organizations have viewed governance, risk and compliance as discrete activities separate from mainstream business processes and decision-making. In this Business Trends Quarterly article, "Demystifying GRC," Lee suggests that in order to overcome business unit, functional, geographic, process and technology silos, and to enable GRC to improve your business, a common, integrated approach to governance, risk and compliance is needed. "Integrated GRC will be more efficient and more effective" Lee says. 

To read more about Lee's views on integrated GRC and the debate around the GRC acronym, please download the article below.