GRC stands for governance, risk, and compliance — an umbrella term for the programs, processes, and practices that organizations implement to: align policies and business activities with strategic objective; monitor, manage, and mitigate risks; and track regulatory changes and verify compliance. OCEG, a nonprofit think tank, popularized the acronym GRC and defines the discipline as the integrated collection of capabilities that enable an organization to reliably achieve objectives [governance], address uncertainty [risk management] and act with integrity [compliance].