One company we are working with on an integrated GRC platform established an issue-tracking system in the first two or three months that aggregated different kinds of issues ??? be it legal dilemmas, audit failures, control failures or risk incidents.