I am a 22-year experienced GRC professional that has designed, built and managed GRC programs at 3 fortune 50 companies and several other large businesses. I believe that GRC-S frameworks and programs should be risk and data privacy driven and that good governance is the key factor to any business’s success.