One platform for GRC

Five capabilities sharing a single control framework. Evidence collected once satisfies every framework that references it.