Herzing, Ian. “A Thematic Qualitative Literature Review of Risk Controls, Compliance Frameworks, and Auditability in Enterprise GRC”. Journal of Information Technology, Cybersecurity, and Artificial Intelligence, vol. 3, no. 3, May 2026, pp. 63-74, https://doi.org/10.70715/jitcai.2026.v3.i3.075.