Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is GRC?

Governance, risk and compliance (GRC) refers to a company’s strategy for managing their organization's overall governance, enterprise risk management and compliance with regulations.

Investing in governance, risk, and compliance at your company can have many benefits: better risk analysis, faster decision making, consistent communications, and more efficient risk mitigation across the business.


Using a GRC tool allows you to create and coordinate policies and controls and automatically monitor them, creating efficiencies across your compliance efforts.

{{cta_withimage8="/cta-modules"}}

Additional resources you might like:

Security
Blog
9 AI risks that could impact your organization—and how to mitigate them

Discover the nine most relevant AI risks that can threaten your network and systems, and explore some practical strategies to proactively mitigate them.

GDPR
Events
Learn How to Automate Compliance for ISO 27001, GDPR, and more

Join our live demo to learn how Vanta automates compliance for ISO 27001, DORA, the EU AI Act, and more, saving you time and money.

Product updates
Blog
New in Vanta | December 2025

Vanta launched AI-generated policies, multiple risk registers, and vendor intake forms.

Additional resources you might like:

Security
Blog
9 AI risks that could impact your organization—and how to mitigate them

Discover the nine most relevant AI risks that can threaten your network and systems, and explore some practical strategies to proactively mitigate them.

GDPR
Events
Learn How to Automate Compliance for ISO 27001, GDPR, and more

Join our live demo to learn how Vanta automates compliance for ISO 27001, DORA, the EU AI Act, and more, saving you time and money.

Product updates
Blog
New in Vanta | December 2025

Vanta launched AI-generated policies, multiple risk registers, and vendor intake forms.

Compliance
Events
Learn How to Automate Compliance for SOC 2, ISO 27001, and More

Join our demo to learn how Vanta can help you accelerate compliance with deep automation and agentic workflows that handle evidence, policies, and remediation for you across frameworks like SOC 2, ISO 27001, HIPAA, and more.

Security
Blog
Beyond security theater: How automated trust closes the AI readiness gap

AI risks are accelerating, but manual compliance can’t keep up.

Compliance
Events
3 Steps to Kick Off First-Time Compliance in 2026

Watch this on-demand webinar to learn how to make compliance work at your pace, without slowing momentum, stalling deals, or putting revenue at risk.

Vendor Risk Management
Events
Office Hour: Transform how you manage third-party and internal risk

Check out our on demand Office Hour where we dive deeper into Vanta’s vision for unified, continuous, AI-powered risk management, and what it means for your business today.

Compliance
Events
Demo: Accelerate Security and Compliance Workflows with AI

Watch our on demand demo to see how Vanta AI streamlines your security and compliance workflows.

SOC 2
Events
Demo: Automating SOC 2, ISO 27001 & More with Vanta

Watch our on-demand demo to see how leading startups and security teams are automating compliance across 35+ frameworks, including SOC 2, ISO 27001, and HIPAA.