Change is the greatest governance, risk management, and compliance(GRC) challenge organizations face. The frequency of change in dynamic business, regulations, and risk is growing at an exponential rate overwhelming the organization when one change impacts other changes. This cascading interrelationship of change is something that has to be understood and kept in sync. Organizations lack the change management processes they need in the context of GRC. They fail to align change with their risk management and business strategies, putting them at a competitive disadvantage and subjecting them to regulatory scrutiny and losses. Managing change in GRC requires that the organization have a federated approach to GRC with an integrated strategy, process, information, and technology architecture.