Has anyone here used sharepoint as a GRC tool before?

Leadership at my company doesn't want to spend money on additional tools or software for grc, so our team was told to set everything up on our existing sharepoint site instead...

Any of you guys have experience with something like this? Any tips or advice would be much appreciated.

cybersecurity grc sharepoint tool