Transforming GRC from a costly, complex burden into a strategic advantage