AI Practices for Effective GRC