Many organizations have implemented an access control (GRC) solution, but unfortunately, they are not taking full advantage of its benefits. It is often used as a backend solution by IT, with minimal involvement from business users, resulting in suboptimal returns on investment and / or resulting in your organisation being over-exposed to fraud risk. This session will highlight the importance of creating a GRC roadmap that outlines the necessary tasks and activities for an organization to derive the maximum value from their GRC investment. We will discuss how to structure the roadmap document which can be shared with your management team to ensure that everyone is aware of what needs to be done, by whom, and within what timeframe.