When it comes to GRC, there is no dearth of challenges. I believe organizational change management is one of the critical challenges, which must be faced in order to emerge successfully.

GRC being such an umbrella term, lends itself to indicate that its all about collaboration. Quite ironically, a "holistic" approach to GRC is often being talked about when GRC by itself is supposed to be holistic enough.

GRC has probably become one more silo. I think a better way to deal with change management is to harness what an organization does best. It may help demonstrate what GRC activities are already embedded within various processes and keep them as a baseline. That can give the necessary confidence to move to the next level.

GRC initiatives can effectively be used by senior management to make sure their organization remains "well-collaborated". Easier said than done!