A lot of time may be spent on the design phase of a GRC program, but ultimately, it's about how the program is implemented. There needs to be a focus on engagement, communication, follow-up, and the sustainability of the GRC program.