Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is GRC?

Governance, risk and compliance (GRC) refers to a company’s strategy for managing their organization's overall governance, enterprise risk management and compliance with regulations.

Investing in governance, risk, and compliance at your company can have many benefits: better risk analysis, faster decision making, consistent communications, and more efficient risk mitigation across the business.


Using a GRC tool allows you to create and coordinate policies and controls and automatically monitor them, creating efficiencies across your compliance efforts.

{{cta_withimage8="/cta-modules"}}

Additional resources you might like:

Security
Blog
The new supply chain blast radius

Modern supply chain incidents turn trusted software into a real-time vendor, identity, and access challenge. Continuous monitoring matters more than ever.

Compliance
Events
Agentic compliance in action with Vanta and Claude

Register to learn how Vanta's MCP Server brings your compliance program directly into Claude.

GRC
Blog
Defining a risk management policy: A beginner's guide

Learn how to build an actionable risk management policy that scales.

Additional resources you might like:

Security
Blog
The new supply chain blast radius

Modern supply chain incidents turn trusted software into a real-time vendor, identity, and access challenge. Continuous monitoring matters more than ever.

Compliance
Events
Agentic compliance in action with Vanta and Claude

Register to learn how Vanta's MCP Server brings your compliance program directly into Claude.

GRC
Blog
Defining a risk management policy: A beginner's guide

Learn how to build an actionable risk management policy that scales.

GRC
Blog
How to write a risk appetite statement in 5 steps

A risk appetite statement isn’t useful unless it drives decisions. Learn how to create one with clear thresholds that help align action with your risk appetite.

GRC
Blog
Risk appetite and risk tolerance: What’s the difference?

Learn what risk appetite and risk tolerance mean, how they differ and formalize them at scale.

Comparisons and reviews
Blog
The best vendor risk management software for 2026

Here are your best options for vendor risk management software, with Vanta taking the top spot.

Vendor Risk Management
Video
Vanta Delivers: Agent for Risk

The Agent for Risk is your 24/7 GRC engineer for internal risk. It helps risk owners move from surfacing a risk to acting on it.

Vendor Risk Management
Video
Vanta Delivers: Internal Risk

New internal risk capabilities give security and compliance teams real-time confidence in their security posture.

Product updates
Video
Vanta Delivers: TPRM

Third-party assessments have historically meant a lot of manual work. As vendor ecosystems grow and AI tools multiply, that process doesn’t scale. Here’s what’s new in Vanta’s TPRM product to help your team keep up.