Applying Information Security and Privacy Principles to Governance, Risk Management and Compliance
Corporate Governance, Risk Management and Compliance (GRC) is typically thought of in terms of adhering to particular compliance regimes (such as Sarbanes-Oxley) while addressing information security and privacy mandates (such as those found in HIPAA) is typically thought of as its own discrete...
