For Security & Risk Professionals

Primary Analyst Photo	Document Information	Rate this Document
	October 26, 2009 Caveat Emptor: The Best And Worst GRC Platform Customer Experiences by Chris McClean with Robert Whiteley, Allison Herald

This is an excerpt

Executive Summary

Governance, risk, and compliance (GRC) programs have a high corporate profile, requiring approval and often participation from top executives. For risk professionals who perform well in the spotlight, that's good news — but failures also attract more attention. This is especially true when the program involves several hundred thousand dollars or more of investment in a GRC platform. To help you learn from the efforts of your peers, Forrester surveyed 70 risk and compliance professionals selected as customer references for The Forrester Wave™: Enterprise Governance, Risk, And Compliance Platforms, Q3 2009. When we asked them about their overall experiences, complaints reflected complicated implementations, praises pointed to strong vendor relationships, and top benefits mainly focused on operational improvements. Considering this feedback, make efficiency the foundation of your GRC business case, and be especially clear on your consulting and support service requirements during your vendor selection process.

TABLE OF CONTENTS

• When The Stakes Are This High, There's No Room For Buyer's Remorse
• Common Complaints Point To Complex Implementations And Small Vendors
• Vendor Accolades Highlight Relationships And Knowledge
• GRC Demonstrates Operational Efficiency, Convergence, And Consistency

RECOMMENDATIONS

• Practice Patience, But Don't Waver On Requirements

WHAT IT MEANS

• GRC Is A Long Way From Being A Commodity
• Related Research Documents

This is an excerpt