
Emerging Risk Management Frameworks for Success • 175
We will end our GRC conversation with some comments from a senior
risk manager at McKesson, the nation’s oldest and largest health care ser-
vices company. e senior manager of IT governance, risk, and compli-
ance at McKesson provides his view about the GRC framework when he
says that GRC is about organizational collaboration including internal
audit, technology risk management, compliance groups, legal, and more.
He further argues that most companies are faced with organizational
and functional silos, poor integration, lack of visibility, wasted resources,
unnecessary complexity, and wasted ...