The Development of a Data-Centred Conceptual Reference Model for Strategic GRC-Management