IAM and GRC: A Practical Perspective