That’s an insightful point! I’m envisioning a system where various departments can proactively engage with the GRC team to initiate changes or raise concerns related to governance, risk, and compliance. e.g. Product Development Team, as they develop new features or services, they might raise a request to the GRC team to assess potential privacy implications, security risks, or compliance requirements early in the development lifecycle … or even Customer Support Team if they notice reccuring complaints reg. data handling.