How GRC Simplifies Internal Controls