IT and GRC – A Solution to the Gap at the Top?Can GRC be the key to engaging senior management in cyber security planning?