While prior governance and risk control (GRC) systems for IT were essentially large spreadsheets that required a good deal of manual entry, Brinqa actively listens to machinedata and other low-level outputs from IT systems, then lets users assign and customize risk indicators for their particular organization.