 - GRC (governance, risk management and compliance) software allows publicly-held companies to integrate and manage IT operations that are subject to regulation. Such software typically combines applications that manage the core functions of GRC into a single integrated package.
GRC software enables an organization to pursue a systematic, organized approach to managing GRC-related strategy and implementation. Instead of keeping data in separate "silos," administrators can use a single framework to monitor and enforce rules and procedures. Successful installations enable organizations to manage risk, reduce costs incurred by multiple installations and minimize complexity for managers.
GRC software implementation typically involves complex installations that include coordination of data between multiple departments, including business, IT, security, compliance, and auditing. Once in place, however,
dashboard
s and
data analytics
tools allow administrators to identify an organization's risk
exposure
, measure progress towards quarterly goals or quickly pull together an
information audit
. Good governance, defined as effective, ethical management of a company at the executive level, is treated as an objectively measurable commodity. Data retention and risk management are converted to similarly measurable metrics.
GRC software can satisfy the needs of multiple stakeholders, including:
- business executives that need to identify and manage risk.
- finance managers assigned to meet regulatory compliance requirements.
- legal counsels grappling with discovery and records retention.
- IT directors managing software installations related to GRC projects across an organization.
Data retention and risk management procedures mandated by the Sarbanes-Oxley Act (
SOX
),
HIPAA
,
Basel II
and regional regulations have all placed unprecedented pressure on IT administrators to coordinate enterprise-wide tracking and organization of compliance measures. As a result, the GRC software category has rapidly become a hotly contested space between industry giants like SAP, Oracle, IBM, CA and a host of smaller startups. Given the complex regulatory burden imposed upon both executives and IT administrators, the tools provided by GRC software will become increasingly important to meeting the new standards.
 |
Learn more about Compliance strategies and best practices |
| LAST UPDATED: |
06 Mar 2009
|
 |
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
|
|
More resources from around the web:
|
|
Show me everything on 
