There has been an increase in the size of governance, risk management and compliance (GRC) departments. Questions are now being asked as to the efficiency and effectiveness of the complex structures, policies, committees and reports that GRC produces.