For many companies, a purely qualitative assessment is no longer appropriate; they are increasingly moving in the direction of quantitative assessment, often in preparation for the use of simulation methods. Simulations give companies more robust results than looking at expected value, as calculating expected values is often flawed. Simulations, on the other hand, do not provide an absolute value, but present results as arbitrary quantiles. In BIC, simulation is an integral part of every GRC Solution. The results of the simulation allow to consider different options, potential actions and possible consequences in the context of a decision making process.