Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is GRC?

Governance, risk and compliance (GRC) refers to a company’s strategy for managing their organization's overall governance, enterprise risk management and compliance with regulations.

Investing in governance, risk, and compliance at your company can have many benefits: better risk analysis, faster decision making, consistent communications, and more efficient risk mitigation across the business.


Using a GRC tool allows you to create and coordinate policies and controls and automatically monitor them, creating efficiencies across your compliance efforts.

{{cta_withimage8="/cta-modules"}}

Additional resources you might like:

Compliance
Blog
Government contracting compliance 101: Everything you should know

Understand the regulations and standards government contractors must meet—and the challenges involved.

Compliance
Events
Beyond Compliance: Building a Scalable Trust Program with Vanta

Join us to see how high-growth companies use Vanta to build trust, stay audit-ready, and scale with confidence.

Compliance
Blog
How to choose the best access review software: A buyer’s guide

Learn why access review software is essential and how to choose and implement the right solution.

Additional resources you might like:

Compliance
Blog
Government contracting compliance 101: Everything you should know

Understand the regulations and standards government contractors must meet—and the challenges involved.

Compliance
Events
Beyond Compliance: Building a Scalable Trust Program with Vanta

Join us to see how high-growth companies use Vanta to build trust, stay audit-ready, and scale with confidence.

Compliance
Blog
How to choose the best access review software: A buyer’s guide

Learn why access review software is essential and how to choose and implement the right solution.

GDPR
Blog
GDPR basics: Everything you need to know to keep your business compliant

Learn the basics of GDPR, what GDPR compliance means for your organization, and how the GDPR rights granted to those in the EU may impact your business.

GRC
Blog
How to choose the best risk management software for your organization

Understand how to manage rising organizational risk and what to look for in the right risk management software.

Security
Events
The CISO Playbook: How Security Leaders at Calm, Perforce, Xactus, and Vanta Drive Outcomes

Hear from CISOs at Calm, Perforce, Xactus, and Vanta for The CISO Playbook - a panel on how enterprise security leaders demonstrate value to boards, manage risk at scale, and align security programs with growth and executive expectations.

Security
Blog
9 AI risks that could impact your organization—and how to mitigate them

Discover the nine most relevant AI risks that can threaten your network and systems, and explore some practical strategies to proactively mitigate them.

GDPR
Events
Learn How to Automate Compliance for ISO 27001, GDPR, and more

Watch this on-demand demo to learn how Vanta automates compliance for ISO 27001, DORA, the EU AI Act, and more, saving you time and money.

Product updates
Blog
New in Vanta | December 2025

Vanta launched AI-generated policies, multiple risk registers, and vendor intake forms.