GRC analysts measure and quantify risk, performs internal audits against best practices and standards, and develop plans for business continuity and disaster recovery. Risk Analysis is a critical component of business continuity and GRC analysts ensure business risk has been identified and mitigated properly.