Governance, risk & compliance: Focus is on regulatory and compliance risk assessments that can be viewed as the various building inspections in the context of the construction or renovation of a house. Building inspectors are government regulators whose job is to ensure compliance with applicable building codes and regulatory requirements - during both initial construction and later renovations. Ultimately, GRC applies a regulatory or compliance lens to its assessments, while Cyber Risk Programs are a collection of periodic and/or continuous assessments that examine risk from a perspective of what could happen from noncompliance or lack of awareness of a threat - even what a bad actor could do to exploit a vulnerability.

Penetration testing: A cybersecurity exercise where an authorized expert attempts to find and exploit vulnerabilities in a computer system to evaluate its security.