I. Herzing, “A Thematic Qualitative Literature Review of Risk Controls, Compliance Frameworks, and Auditability in Enterprise GRC”, Journal of IT, Cybersecurity, & AI, vol. 3, no. 3, pp. 63–74, May 2026, doi: 10.70715/jitcai.2026.v3.i3.075.