Integrated governance, risk and compliance (iGRC) approach