GRC comprises strategies, methods and tools to manage a company’s overall governance, risk and compliance. Some GRC activities include managing company policies, setting up control measures, identifying risks, ensuring processes and procedures are compliant and compiling reporting across all GRC-related activities.