Exploring the contribution of information technology to governance, risk management, and compliance (GRC) initiatives