Sometimes, the hardest question a supervisor can ask of a firm is: Are you in control? Many firms are increasingly making use of Governance, Risk Management and Compliance (GRC) technology to answer this question, both to show that they are indeed, in control, and that they are taking active steps to improve the quality of the risk management process.