Financial executives may wonder about all the fuss surrounding "GRC," or governance, risk management, and compliance. Is it just a repackaging by consultants and software vendors that brings together risk and compliance management? Why does everyone have a different definition of GRC, and if it is actually important, how do we know our GRC processes are effective?