A compliance audit is an independent evaluation to ensure that an organization is following external laws, rules, and regulations or internal guidelines, such as corporate bylaws, controls, and policies and procedures. Compliance is one leg in the tripod of GRC, which stands for governance, risk, and compliance.