# Sources

The sources below support the factual examples and guidance discussed above. Vendor documentation establishes documented behaviour, not independently tested performance. Advisory material and job descriptions are identified as such. No buyer quotations, production-system tests or measured implementation outcomes were available for this document.

1. KPMG, *Implement GRC technology the right way* — advisory methodology: `https://kpmg.com/kpmg-us/content/dam/kpmg/pdf/2024/implement-grc-technology-right-way.pdf`
2. NIST, *SP 1301: Creating and Using Organizational Profiles*: `https://csrc.nist.gov/pubs/sp/1301/final`
3. LogicGate, *Export Data from Table Reports*: `https://help.logicgate.com/hc/en-us/articles/4402683131668-Export-Data-from-Table-Reports`
4. LogicGate, *Risk Cloud API: View Record Audits*: `https://www.logicgate.ai/developer/risk-cloud-api-view-record-audits/`
5. ServiceNow, *Common roles in Governance, Risk, and Compliance*, Brazil release documentation, updated 10 September 2026: `https://www.servicenow.com/docs/r/governance-risk-compliance/grc-common-functions/grc-common-roles.html`
6. NIST, *AI 600-1: Generative Artificial Intelligence Profile*: `https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf`
7. OCC, Federal Reserve and FDIC, *Third-Party Risk Management: A Guide for Community Banks*: `https://www.occ.gov/news-issuances/news-releases/2024/pub-third-party-risk-management-guide-for-community-banks.pdf`
8. HHS, *Guidance on HIPAA & Cloud Computing*: `https://www.hhs.gov/hipaa/for-professionals/special-topics/health-information-technology/cloud-computing/index.html`
9. The IIA, *Global Internal Audit Standards*, particularly Standards 7.1 and 10.3: `https://www.theiia.org/globalassets/site/standards/editable-versions/globalinternalauditstandards_2024january9_editable.pdf`
10. ServiceNow, *Integration Hub usage and subscription*, Brazil release documentation, updated 10 September 2026: `https://www.servicenow.com/docs/r/integrate-applications/integration-hub/subscription-usage.html`
11. Relay, *GRC Administrator* — employer-posted role description reviewed for illustrative operating responsibilities: `https://job-boards.greenhouse.io/relaypro/jobs/8180077`