I. Herzing, “A Thematic Qualitative Literature Review of Risk Controls, Compliance Frameworks, and Auditability in Enterprise GRC”, Journal of Information Technology, Cybersecurity, and Artificial Intelligence, vol. 3, no. 3, pp. 63–74, May 2026, doi: 10.70715/jitcai.2026.v3.i3.075.