GRC is the integrated collection of capabilities that enable an organization to reliably achieve objectives, address uncertainty and act with integrity. GRC as an acronym denotes governance, risk, and compliance — but the full story of GRC is so much more than those three words. GRC doesn't burden the business, it supports and improves it.