Governance, risk and compliance (GRC) best practices are evolving because the amount of risk and risk types are growing and becoming more complex.