GRC – Governance, Risk, And Compliance
Governance, risk, and compliance (GRC) trends are always evolving. Follow Forrester’s latest research and insights on GRC trends.
Insights
Blog
Does LLM Now Mean Large Liability Model?
Headlines about autonomous AI agents probing, bypassing, attempting, and even successfully hacking government and other websites have sparked a new round of debate about AI risk. For business leaders in customer-facing functions (especially marketing, sales, digital, or customer experience), the key point is that, as AI systems become more autonomous, the gap between what they […]
Blog
Resilience Pros! Answer Our Questions To Get A Report
Each year, Forrester and the Disaster Recovery Journal (DRJ) team up to launch a study examining resilience. We survey people on different topics in resilience such as disaster recovery, but this time, the focus is solely on business resilience, including business continuity and operational resilience. No matter whether your program’s goals are to create business […]
Blog
Your Application Vendors Control The Meter, The Gate, And The Referee
Tech executives keep asking, “Should we slow down AI adoption?” It is the wrong question. Your application vendors have already answered a more consequential one: how much autonomy your agents will get, what that autonomy will cost, and who will control it.
Blog
Basware Unveils Governed Agentic AP Automation
At Basware’s VIP customer event in Dublin last week, the company set out an ambitious direction for invoice lifecycle management. Its roadmap brings together agentic AI, invoice data, payment fraud prevention, and e-invoicing compliance. The strategy reflects how the accounts payable (AP) automation market is changing. Touchless invoice processing remains important, but it’s becoming a […]
Blog
GRC Customers Have Spoken: Four Market Realities Vendors Can’t Ignore
This week, I published the Buyer’s Guide: Governance, Risk, And Compliance Platforms, 2026, summarizing how satisfied clients are with their governance, risk, and compliance (GRC) platforms. The report is based on customer reference data from The Forrester Wave™: Governance, Risk, And Compliance Platforms, Q2 2026. Speaking to customers during evaluative research processes is my favorite […]
Blog
Who Will Become The Trusted Assurer Of Your Enterprise AI?
California’s recently enacted AI legislation may ultimately matter for a reason that has received relatively little attention. Senate Bill 813 and Assembly Bill 1405 are not just about governing AI systems. They begin to formalize expectations for the organizations that assess, verify, and audit those systems. The state’s subsequent executive order reinforces that direction by […]
Blog
Announcing The Inaugural Risk Consulting Services Landscape, Q3 2026
This week, I published The Risk Consulting Services Landscape, Q3 2026 (Forrester clients only). This is our first review of the landscape for risk consulting firms advising risk, compliance, and internal audit leaders. Until the introduction of AI in late 2022, services offered by risk consulting firms had changed little since I hung up my consultant […]
Blog
Rules Of The Road: What Flock’s 71% Misread Rate Teaches Us About Third-Party AI Risk
Roseville, California just provided a case study in what happens when organizations confuse “AI-powered” with “AI-verified.” A Business Insider investigation found that Flock Safety’s AI license plate readers misread plates in 71% of the alerts sent to Roseville police over two years, incorrectly flagging vehicles as stolen or linked to a felony. That number isn’t […]
Blog
Never Too Small, Part 2: The Rise Of The Cyber Ambulance Chasers
Two years ago, several of us wrote that Arlington, Massachusetts wasn’t “too small for cybercriminals” after a business email compromise diverted nearly half a million dollars from a town construction project. The criminals didn’t target a major enterprise or a household brand. They found a small municipality with finite staff and resources and even less […]
Blog
Build Bridges To Customers With Digital Product Passports
There's a real opportunity for organizations to leverage digital product passports beyond sustainability and compliance use cases.
Blog
Governance: New Strategy, Old Hands On The Wheel …
You know the pattern: I show up, tell a story from a seat I actually sat in, and we get into what it takes to lead technology when the official playbook and the real one are two different documents. Today’s topic is governance, which I realize is not the word that makes anyone lean in. Nobody pitches “Let’s talk about […]
Blog
UK Social Media Ban Forces Platform Accountability
The ban marks a moment where government regulation is catching up to consumer expectations. But it's not just about online safety — it's a regulatory demand that will influence social media platform experiences and product decision-making.
Blog
What Matters Most For Banks Buying Enterprise Fraud Management Solutions In APAC, 2026
Real-time fraud decisioning is now table stakes for enterprise fraud management (EFM) in Asia Pacific. The harder challenge is finding an EFM solution that can keep pace with each organization’s operating model, regulatory obligations, and market-specific complexity. How organizational profiles affect banks’ EFM solution choice In our latest report, Buyers’ Guide For Enterprise Fraud Management […]
Blog
Announcing The Forrester Wave™: Governance, Risk, And Compliance Platforms, Q2 2026
Check out the latest Forrester Wave™ evaluation of the governance, risk, and compliance platforms market and its findings.
Blog
Today’s Regulatory Intelligence Solutions Replace Drudgery With Confidence
Over the past five years, security and risk (S&R) professionals have experienced a flood of new cybersecurity regulations, with 170 countries now boasting cybersecurity and data protection laws. Leaders are left to decide which regulations apply, identify gaps, and implement controls — an onerous task as regulatory volume and the pace of change accelerate. Manual […]
Blog
Project Glasswing: The 10 Consequences Nobody’s Writing About Yet
Anthropic’s Project Glasswing and Claude Mythos Preview prove that autonomous zero-day discovery now operates at scale. We evaluate the immediate, medium-term, and structural consequences for security teams, vendors, insurers, regulators, and future careers.
Blog
The Expanding Universe Of GRC For AI: Key Questions From Technology Leaders
In 1929, astronomer Edwin Hubble discovered something unsettling. The universe isn’t static; it’s expanding everywhere, simultaneously, at every scale. His simple equation (Hubble’s law) shows that galaxies are accelerating away from each other, and the farther they are, the faster they recede. Eventually, galaxies become so distant that they cross our observable horizon entirely — […]
Blog
Context, Not Models, Is The Real AI Bottleneck: Reltio’s System‑Of‑Context Bet
AI took center stage at Reltio DataDriven 2026, where global data and AI leaders aligned on one urgent priority: turning trusted, real-time, contextual data into scalable AI and measurable business impact. Reltio made a clear strategic bet: The next enterprise AI bottleneck isn’t model choice or orchestration but shared context — rebranding its platform around […]
Blog
When Fixing Security Vulnerabilities Breaks Your Customer Email Program
In January 2026, Salesforce changed how its Marketing Cloud Engagement platform encrypts tracked email links. The fix addressed a vulnerability that could have exposed CloudPages content, such as landing pages, microsites, forms, subscriber data from preference and unsubscribe centers, and email content via web view links. But the fix created a new problem: All tracked […]
Blog
Ready For OpenClaw To Pry Into Your Environment And Grip Your Data
A formidable challenge awaits security leaders as personal tools like Moltbot spread. AI butlers are the next shadow super-user.
More posts