They consider issues such as business performance variability and suboptimal return on investment, inefficient operating experiences, business and process controls transformation, application security integrity, governance risk management and compliance (GRC) technology enablement, business and/or IT GRC, continuous monitoring, vendor and contract risk management and IT risk management.