» Governance Risk and Compliance establishes security policies and standards, conducts risk assessments, and promotes securityrelated training and awareness programs, as well as ensuring compliance with legislation and regulatory requirements.