The links between authority documents, policies, controls, and risks can take a number
of different paths, depending on your organization's requirements.
GRC supports any hierarchy you create by establishing many-to-many relationships between all
the tables involved and using these relationships to create calculated links between
elements. Calculated links are indirect links between elements that aid in reporting on authority
documents by rolling up results from control tests. Calculated links are created automatically as
you add direct links between elements and managed dynamically as you edit existing links in your