Dear reader:
Nice to see you again. This week we will be talking about Governance, the first pillar of the GRC process. We can call Governance the foundation stone of the GRC process. Using an analogy, constructing Risk and Compliance without Governance is like trying to build a house roof and ceiling without building the walls. It would be best if you had a governance framework in your company to implement a risk framework. Of course, you cannot demonstrate compliance without a defined governance for your IT processes.