Changing business models, strategic investments, and regulations often result in new sets of controls, policies, and even technologies to address the latest task or risk resulting in process redundancies, an inability to scale, and escalating costs. A better way is to embed policy checks in the underlying applications and integrate with the underlying business processes themselves so that GRC activities become a natural step in a business process instead of a separate process altogether. At the same time, many decisions are made without fully understanding risk levels, which can lead to poor results. Analytics are being used today to drive business transformation; similarly they should be used to drive risk awareness.