Assertions of green business practices are sprouting up across organizations, which then promote these pursuits as part of good corporate social responsibility (CSR). Customers, investors, and regulators are starting to increase their scrutiny of these efforts — with expectations for improved "green IT," "sustainability," or other such labels. However, without measured policies, control mechanisms, and reporting functions, the green organization has little to show for its investment beyond a few public relations buzzwords. Green business initiatives belong within the control of governance, risk, and compliance (GRC) programs, which can assure that such efforts and investments are consistent, measurable, and transparent.