This whitepaper addresses the need for, and pathway to, the development of GRC-XML, technical standards providing a common language for risk and controls. As the GRC-XML Jurisdiction (provisional) within the XBRL organization, OCEG is undertaking the development of these open standards.