IT Governance (Information Technology Governance), Risk and Compliance (GRC) are critical practices which ensure the right investments are made in technology to drive business value, protect the organization, and legally operate. Governance, Risk and Compliance aren’t optional; whether planned or ad-hoc, your organization has to engage in these.