Risk management involves identifying and mitigating potential risks. GRC (Governance, Risk, and Compliance) is a framework that combines risk management, governance, and compliance activities to ensure organizational compliance and effective decision-making.