Governance, risk and compliance, though interconnected, are separate from one another. Governance is all about making decisions and putting them into action – it’s how an organization is steered. Risk, on the other hand, is about spotting, assessing and dealing with potential threats to the organization’s survival or success. Lastly, compliance is about making sure the organization meets all laws, standards and regulations it needs to follow.