Everything we write on this topic is gathered here.
GRC: Why Governance, Risk, and Compliance Work Better as One System
PMO Advisory: Diagnosing a PMO That Isn't Delivering Value
SIEM Tools Won't Fix a Governance Gap
Choosing a GRC Platform: What Actually Matters
The Business Case for Investing in Compliance and Governance
IT Governance and Cybersecurity: Where to Begin