Governance, risk management, and compliance or GRC is the umbrella term covering an organization's approach across these three areas: Governance, risk management, and compliance