GRC Glossary

Clear definitions for the governance, risk, and compliance professionals who keep their organizations audit-ready.

Browse by category

Browse A-Z

Showing 362 terms

B

Backup and Recovery

Basel Framework

Baseline Standard

Bayesian Analysis

Board Effectiveness Evaluation

Bottom-Up Risk Assessment

Breach Response

Business Context

Business Continuity Management (BCM)

Business Continuity Strategy

C

Categories and Subcategories

Chair of the Board

Chief Audit Executive

Chief Executive Officer (CEO)

Chief Risk Officer (CRO)

Climate-Related Risk

Closure Verification

Commitment to Competence

Committee Charter

Communication and Consultation

Compensating Measure

Compliance Assessment

Compliance Automation

Compliance Breach

Compliance Control

Compliance Framework Mapping

Compliance Metrics

Compliance Obligation Register

Compliance Program

Conflict of Interest

Consideration of Fraud

Consulting Services

Continuity Capability

Continuity Exercise

Continuity Governance

Continuity Requirements

Contractual Clauses

Contractual Right to Audit

Control Attribute

Control Automation

Control Effectiveness Rating

Control Library

Control Narrative

Control Procedure

Control Standard

Control Testing Automation

Corporate Citizenship

Corporate Policy

Corporate Values

Corrective Control

Corrective and Preventive Action

Critical Business Function

Cyber Risk Appetite

Cyber Supply Chain

Cybersecurity Disclosure

Cybersecurity Framework

Cybersecurity Maturity Model Certification

Cybersecurity Risk Register

D

Data Life Cycle

Detective Control

Disassociated Processing

Disclosure Committee

Due Diligence Questionnaire

Due Professional Care

Duty of Good Faith

Duty of Loyalty

Dynamic Risk Management

E

Effect on Objectives

Emergency Response Plan

Engagement Communication

Engagement Objectives

Engagement Scope

Engagement Supervision

Enterprise Risk Oversight

Entity-Level Controls

Environmental, Social and Governance (ESG)

Escalation Matrix

Executive Compensation

Executive Management

F

Financial Statement Disclosure

Findings Management

Framework Profile

Fraud Prevention

G

Gap Identification

General IT Controls (ITGC)

Gifts and Entertainment Policy

Global Internal Audit Standards

Governance Assurance

Governance Charter

Governance Maturity

Governance Operating Model

Governance Workflow

Governance and Culture Component

Greenhouse Gas Protocol

J

Jurisdictional Requirements

K

Key Control Indicator

L

Lagging Indicator

Leadership and Commitment

Leading Indicator

Learn-Align-Perform-Review

Legal and Regulatory Requirements

Loss Distribution

M

Machine Learning Risk Detection

Machine Learning Risk Scoring

Managed Service Provider Risk

Management Reporting

Management Response

Monte Carlo Simulation

Mutual Aid Agreement

N

Nominating Committee

O

OCEG GRC Capability Model

Obligations Library

Operational Resilience Framework

Organizational Context

Q

Qualitative Risk Analysis

Quantitative Risk Analysis

R

Real-Time Reporting

Reasonable Assurance

Recovery Procedures

Regulatory Body

Regulatory Change Feed

Regulatory Content Feed

Regulatory Disclosure

Regulatory Guidance

Regulatory Horizon Scanning

Regulatory Inventory

Regulatory Mapping

Regulatory Obligation

Regulatory Requirement

Reliance on Assurance

Reporting Mechanism

Resilience Framework

Retaliation Protection

Risk Aggregation Reporting

Risk Appetite Statement

Risk Assessment Cadence

Risk Convergence

Risk Correlation

Risk Governance Structure

Risk Heat Map Reporting

Risk Heat Map Visualization

Risk Heat Mapping

Risk Management Architecture

Risk Management Information System

Risk Management Maturity Model

Risk Management Policy

Risk Management Principles

Risk Modification

Risk Prioritization Matrix

Risk Register Automation

Risk Register Entry

Risk Reporting Framework

Risk-Based Audit Planning

Risk-Based Decision Making

Roles, Responsibilities and Authorities

T

Task Force on Climate-Related Financial Disclosures

Technology Risk

Third-Party Assurance Report

Third-Party Risk

Third-Party Risk Management Platform

Threat and Hazard Identification

Top-Down Risk Assessment

U

Unified Compliance Framework

V

Vendor Assessment

Vendor Classification

Vendor Concentration

Vendor Contract Management

Vendor Criticality

Vendor Governance

Vendor Lifecycle

Vendor Remediation

Vendor Risk Domain

Vendor Risk Rating

Vendor Risk Register

Vendor Scorecard

Vendor Segmentation

Vendor Termination

W

Warning and Communication

Work Recovery Time

Workflow Engine

Promotional banner for the Pentest Readiness checklist download