Governance, Risk & Compliance management – burden or benefit?