260 likes | 343 Views
Webinar Behind The Scenes Of The Forrester Wave: GRC Platforms, Q1 2014. Chris McClean, Principal Analyst and Research Director Renee Murphy, Senior Analyst Nick Hayes, Analyst February 12, 2014. Call in at 10:55 a.m. Eastern time. Agenda. The GRC market today Forrester Wave overview
E N D
WebinarBehind The Scenes Of The Forrester Wave: GRC Platforms, Q1 2014 Chris McClean, Principal Analyst and Research Director Renee Murphy, Senior Analyst Nick Hayes, Analyst February 12, 2014. Call in at 10:55 a.m. Eastern time
Agenda • The GRC market today • Forrester Wave overview • Selecting the right vendor
Agenda • The GRC market today • Forrester Wave overview • Selecting the right vendor
Demand is on the rise “Which of the following best describes your firm’s plans to adopt a GRC platform?” 2011 N = 625 28% 2013 N = 955 52% Base: North American and European security and risk management professionals at companies with 1,000 or more employees; Source: Forrsights Security Survey, Q2 2013
Once implemented, expansion continues “How do you expect your use of the GRC product and vendor to change over the next year?” Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
The use cases are also growing “Which of the following functionality/capabilities do you currently use your GRC product for?” (Top 12 are displayed) Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
The number of users is impressive “Approximately how many people at your organization use your GRC platform?” Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
The value is in the coordination “At your organization, which top leaders/stakeholders are regularly involved in setting the vision and strategy of your GRC program?” (Select all that apply) Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
Defining success reflects maturity “Please rate your level of satisfaction with the business value you receive from the GRC vendor/product.” Percent of customers that are very satisfied (selected “9” or “10” on 0-10 scale) Mature programs are better at articulating and defining value. Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
User experience and reporting still lag “Please rate your level of satisfaction with the technical functionality of the GRC product in the following categories.” Percent of customers that are very satisfied (selected “9” or “10” on 0-10 scale) Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
On-premises is still most common “How is the GRC platform delivered to you?" Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
Agenda • The GRC market today • Forrester Wave overview • Selecting the right vendor
The vendor landscape is vast “Which GRC vendors did you seriously consider during the vendor selection process (including the vendor you ultimately selected)?” Select all that apply Forrester considered close to 60 vendors for our GRC Forrester Wave! Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
Having multiple platforms is common “Does your company use any other GRC platforms?” Base: 66 global GRC professionals; Source:Q3 2013 Global Governance, Risk, And Compliance Platforms Forrester Wave™ Customer Reference Online Survey
It’s not worth defining sub-GRC markets All GRC platforms have the same four basic functions: A relational database A workflow engine Features to enable content management Dashboards and analytics Use cases are extremely diverse . . . . . . and that diversity will only increase!
The Forrester Wave evaluation process Considered close to 60 vendors to participate; selected 19 vendors based on: Breadth of capabilities Substantial market presence Relevance to the market For each vendor, Forrester: Collected detailed questionnaires Conducted 3-hour executive briefings/online demos Surveyed and interviewed 3 customer references Fact-checked all information at 3 stages
The Forrester Wave™: GRC Platforms, Q1 2014 Source: January 27, 2014, “The Forrester Wave: Governance, Risk, And Compliance Platforms, Q1 2014” Forrester report
Agenda • The GRC market today • Forrester Wave overview • Selecting the right vendor
How do you select the right solution? One size does not fit all. All 19 vendors are relevant and worth consideration, depending on your specific requirements. Forrester included tailored weightings to modify the vendor scores for three common use cases: Corporate compliance, environmental compliance, and social responsibility IT GRC and third-party risk management Financial controls and operational risk management
Consolidated platform or best-of-breed • Specialized requirements require best-of-breed solutions. • Consolidated platforms can handle a large number of diverse risks and compliance issues. • Some environments can take advantage of both best-of-breed and consolidated solutions.
Download the Forrester Wave tool for the detailed model and analysis Source: January 27, 2014, “The Forrester Wave: Governance, Risk, And Compliance Platforms, Q1 2014” Forrester report
Customize your weightings Customize the weightings according to your specific needs and use case. Source: January 27, 2014, “The Forrester Wave: Governance, Risk, And Compliance Platforms, Q1 2014” Forrester report
Recommendations • Determine the scope and roles that your GRC platform will serve. • Expect your implementation to take time (at least four to six months). • Identify the top one or two use cases, and roll those out first. • Define the metrics and milestones you will use to measure success — and be specific.
Christopher McClean cmcclean@forrester.com Renee Murphy rmuprhy@forrester.com Nick Hayes nhayes@forrester.com @nickhayes10