I'm deeply interested in governance, but I've always felt that GRC (Governance Risk and Compliance) is a bit of a dead end. It often seems to focus purely on technology and in enforcing the letter of the regulations rather than on the spirit of good...