eGRC is a rapidly evolving business capability that uses processes and tools to combine: - Compliance programs that measure control effectiveness, - Risk management programs that categorize and prioritize risks, and - Governance programs that identify, monitor and manage remediation of those risks.