Skip to content
Blueprint Catalog

    ↑↓ move · Enter open · Esc close

    11 — Technology category · TR-160.30

    Governance, Risk & Compliance Platforms

    Platforms that hold risks, controls, policies, obligations and audit work on one data model, test the controls and track issues to closure.

    • GRC Platform
    • Integrated Risk Management
    • IRM
    • Audit Management Software

    In scope

    • Risk registers and control libraries
    • Policy attestation and obligation tracking
    • Audit planning, workpapers and findings

    Out of scope

    • Security monitoring that produces control evidence (see TR-100.40)
    • Vulnerability scanning (see TR-100.50)
    • Sanctions screening and transaction monitoring (see TR-140.30)

    Example technologies · 6

    Well-known technologies in this category, named as facts. Not a shortlist or an endorsement.

    • Archer
    • MetricStream
    • ServiceNow GRC
    • Diligent
    • Optro
    • IBM OpenPages

    Realizes · 8

    Elsewhere in Architecture, Process & Risk Platforms