How to Understand the Baseline and Map Risks Before Building GRC Systems (1:08) “When building a proactive GRC program and/or system technology solution, it is essential to understand your baseline and spectrum of risks, including operational, financial, regulatory, and reputational risks. You really need to understand your current state before you can move forward in defining the future requirements from that view.”