The writer is a governance, risk and compliance specialist.