Technical and regulatory definitions across GRC standards
Sample selection based on professional judgment and risk criteria.