Hi Priya,
I think you can contact your basis team and do a system copy from production to QAS environment.
Basis will do entire system data export and then import in QAS so, the quality GRC environment will have exactly the same settings as the production.
All data will be copied during the system copy, master data transactional data including all GRC settings as well.
As a GRC consultant you need to review all the module specific functionalities are working fine in QAS or not after system copy has been done by basis.
Check RFC connections once which are linked to QAS GRC to other SAP systems.
ARM: Raise a GRC request and approve. see all workflow works fine or not.
EAM: Raise a FFID request and try to approve. see the workflow whether requests are sent to FFID approver or not. Review logs once FF session is completed.
Few other GRC functional testing like: Risk ID, Mitigation ID, Function ID creation and modification testing you can carry out as well.
Thanks,
Biswajeet