GRC Governance, risk management, and compliance document is in the hands of the manager.