Governance Risk & Compliance (GRC)

Every organizational business function and process is governed in some way to meet objectives. Each of these objectives has risks, as well as controls that increase the likelihood of success (or minimize the impact of failure). These are the fundamental concepts of GRC. To maximize business performance, GRC programs are designed to help companies avoid major disasters and minimize the impact when avoidance is unlikely.

Latest Research

  • For Security & Risk Professionals

    REPORT: Designate Clear Lines Of Risk And Compliance Accountability With Forrester's RASCI Tool

    Organization: The Governance, Risk, And Compliance Playbook

    December 8, 2017 Nick Hayes

    Without clearly defined GRC responsibilities, stakeholder involvement flounders, risks go unnoticed and untreated, and company exposure to large fines and devastating crises grows. This report helps risk pros build and maintain an effective GRC stakeholder plan, outlining the major tasks and expectations for key leaders you will hold accountable for the success or failure of their GRC duties. We also provide an interactive tool that you can use to document who will be responsible, accountable, supportive, consulted, or informed (RASCI) for all GRC tasks. This document is updated annually as part of Forrester's governance, risk, and compliance playbook.

  • For Security & Risk Professionals

    REPORT: The State Of Risk Management 2017

    Benchmarks: The Governance, Risk, And Compliance Playbook

    December 5, 2017 Christopher McClean

    Executives must take big bets on new technologies, business models, and emerging markets to stay ahead of the fast pace of competition. With so much at stake and so many public examples of corporate failures, a formal risk management program seems clearly worthwhile, and companies that have one see direct benefits. However, barriers persist and adoption has been slow. This report examines how risk professionals can overcome skepticism and build a program that will help guide their organization through rapid market evolution and disruption.

  • For Application Development & Delivery Professionals

    REPORT: The Business Applications Landscape 2017 To 2020: SaaS Disruption And Vendor Proliferation

    Landscape: The SaaS Transformation Playbook

    November 29, 2017 Paul D. Hamerman, Andrew Bartels

    The landscape of critical process applications ranges from customer-focused business technology (BT) applications to solutions for managing people, finances, operations, and products. As this $167 billion software market evolves, the pace of application replacements will accelerate as aging on-premises software moves to software-as-a-service (SaaS). This landscape report will help application development and delivery (AD&D) pros understand the breadth and proliferation of business process applications and the market's significant technology disruption. This is an update to a previously published report. Forrester regularly updates reports to ensure the data and content remain accurate.

  • For Application Development & Delivery Professionals

    REPORT: The Critical Role Of Policy In Enterprise Collaboration

    Processes: The Enterprise Collaboration Playbook

    November 28, 2017 Art Schoeller

    A clear collaboration policy is essential for employees using customer, partner, and internal collaboration tools. While it takes a cross-organizational team to establish a collaboration policy, the technology organization will play an increasingly important role: To steer the policy creation process, embed the policy in tools and training, and educate employees. This report provides application development and delivery (AD&D) professionals with guidance on creating an effective collaboration policy amid a changing landscape of opportunities and challenges. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.

  • For Enterprise Architecture Professionals

    REPORT: Put The Business Back In Your Data Management Business Case

    Business Case: The Data Management Playbook

    November 22, 2017 Michele Goetz

    Be customer-driven: It's time for enterprise architects to put the business back in the business case. Partner with business stakeholders to define where and how data will advance the business and what capabilities it needs to evolve into a data-driven organization. This report describes which stakeholders you should engage with to gather the information you'll need. It also explains how to build business strategy into your data strategy and how to make the business case for your data management agenda. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.

View all research

Analysts Who Cover Governance Risk & Compliance (GRC)

View all related analysts