Remember GRC
Full name: Governance, Risk, and Compliance
Memory aid: Govern the plan, weigh Risk, Check obligations.
Compliance with a requirement does not guarantee security.
Study area: MIS, risk & continuity · Batch 3
Relevant study for: CompTIA Security+ SY0-701 · ISC2 CISSP 2024 outline · CompTIA SecurityX · ISC2 CC
Practice with exam flashcards →MIS, Risk & Continuity / Knowledge library
GRC — Governance, Risk, and Compliance
Aligns oversight, risk decisions, and obligations.
Why learn GRC — Governance, Risk, and Compliance?
Aligns oversight, risk decisions, and obligations.
Where it came from
Compliance with a requirement does not guarantee security.
- Memory aid (a learning cue, not the expansion): Govern the plan, weigh Risk, Check obligations.
Build your understanding
Work through these exercises in order. Try the task before opening a reference.
- Without looking, expand GRC: Governance, Risk, and Compliance.
- Recall this memory aid: Govern the plan, weigh Risk, Check obligations.
- Explain the practical use: Aligns oversight, risk decisions, and obligations.
- Explain this distinction: Compliance with a requirement does not guarantee security.
- Identify GRC in a device specification, architecture diagram, or system inventory.
Documentation and sources
- NIST cybersecurity glossary (csrc.nist.gov)