56% of IT, security, risk, and compliance professionals use a common controls framework (CCF) to streamline GRC processes.