GRC Glossary

Clear definitions for professionals working across governance, risk, and compliance.

Browse by category

The state of ai impact assessment

Browse A-Z

Showing 306 terms

B

Baseline Standard

Bottom-Up Risk Assessment

Business Conduct Standards

Business Continuity Policy

Business Objective Alignment

Business Recovery

C

COSO Internal Control-Integrated Framework

CSF Subcategory

Categorize Step

Certified in Risk and Information Systems Control

Certified in the Governance of Enterprise IT

Chief Audit Executive

Chief Risk Officer (CRO)

Committee Charter

Community Profile

Compliance Attestation Records

Compliance Automation

Compliance Data Source Registry

Compliance Obligation Register

Compliance Owner

Compliance Posture

Compliance Program

Compliance Register

Compliance Requirements Mapping

Compliance Scorecard

Configuration Item (CI) Linkage

Conflict of Interest

Conflicts Disclosure

Consequence Analysis

Continuity Objective

Contract Lifecycle Management

Contractual Controls

Control Attestation Workflow

Control Automation

Control Catalog

Control Effectiveness Assessment

Control Effectiveness Metrics

Control Environment Assessment

Control Library

Control Objective Mapping

Control-Policy Mapping

Corporate Governance

Corrective Controls

Critical Business Activity

Critical Function

Critical Supplier

Critical or Important Function

Cross-Framework Mapping

Current Profile

D

Data Processing Register

Data Protection Principles

Data Subject Request

Data Subject Rights Fulfillment

Digital Operational Resilience Testing

Digital Signature Approval

Disclosure Controls and Procedures

Disclosure Obligation

Dispute Resolution

Duty of Loyalty

F

Facilitation Payment

Failure Mode and Effects Analysis

Financial Disclosure

Financial Impact Modeling

Finding Remediation

Framework Crosswalk

G

GRC Capability Model (OCEG Red Book)

GRC Professional (GRCP)

GRC Professional Certification

General IT Controls

Gifts and Entertainment Policy

Global Internal Audit Standards

Governance Committee

Governance System Design Factors

Governance and Management Objectives

K

Key Assumptions

Key Control Indicator

L

Legal Risk Assessment

Legal Spend Management

License and Authorization

Likelihood and Consequence

Loss Event Data

M

Management Reporting

Manual Controls

Market Abuse Regulation

Material Disclosure

Matter Management

Monitoring and Review

N

Nominating Committee

Non-Financial Disclosure

O

Obligations Library

Ongoing Vendor Monitoring

Operating Structures

Operational Disruption

Outside Counsel Management

Oversight Responsibilities

Q

Qualitative Risk Analysis

Quantitative Risk Analysis

R

Reconciliation Controls

Recording and Reporting

Regulatory Alignment

Regulatory Breach

Regulatory Change Management Tool

Regulatory Change Tracking

Regulatory Correspondence

Regulatory Disclosure Reporting

Regulatory Framework

Regulatory Horizon Scanning

Regulatory Inventory

Regulatory Investigation

Regulatory Obligation

Regulatory Reporting Metrics

Regulatory-to-Policy Traceability

Relevant Assertion

Remediation Deadline

Remediation of Deficiencies

Reporting Lines

Resilience Metrics

Resilience Testing Programme

Resource Requirements

Retaliation Protection

Risk Appetite Statement

Risk Appetite Statement Reporting

Risk Assessment Scale

Risk Correlation

Risk Culture Assessment

Risk Governance Structure

Risk Information and Communication

Risk Integration

Risk Interconnectivity

Risk Quantification Modeling

Risk Reduction Rate

Risk Reporting Cadence

Risk Reporting Dashboard

Risk Response Portfolio

Risk-Adjusted Decision Making

Risk-Adjusted Performance

Risk-Aware Culture

Risk-Based Internal Audit (RBIA)

Root Cause Remediation

T

Test of Operating Effectiveness

Top-Down Risk Assessment

Top-Down Risk-Based Approach

Transparency Reporting

V

Value Creation and Preservation

Value Creation and Protection

Value Preservation

Vendor Assessment Questionnaire

Vendor Contingency Planning

Vendor Performance Metrics

Vendor Risk Profile

Vendor Risk Rating

Vulnerability Scoring (CVSS)

W

Whistleblower Hotline

Whistleblowing Obligation

Promotional banner for the Penetration Report Template Kit