https://www.rede-consulting.com/post/understanding-the-role-of-each-job-function-in-a-comprehensive-grc-program