Turning Risk Into a Strategic GRC Advantage