Navigating the GRC maze – understanding GRC solutions and software selection

Todd Davies — Sun, 08 Jun 2008 05:09:57 +0000

The number of software offerings in the space has increased, and the marketing spin is increasing which means that unless you are a highly experienced and sophisticated buyer with a track record in software selection in this space, your chances of making a poor selection are high.

TDA understands the GRC market. We understand the strengths and weaknesses of different providers and can guide you through the selection process.

We can help you:

Understand the different possibilities including in this space such as continuous control monitoring, computer-assisted audit techniques, audit follow-up, data mining, control self-assessment, SOX compliance, risk assessment, legislative compliance, policy compliance, legislative training and integrated solutions.
Be very clear on what your specific needs are, including developing your strategy for enterprise governance.
Determine whether you require a generalised or niche solution
Understand what the most cost-effective solutions are
Be clear on which solutions have the strongest support base and longevity
Negotiate the right price

For more information, contact us.

To subscribe to this series of occasional articles and case studies, please click here.

Todd Davies & Associates » control self assessment

Navigating the GRC maze – understanding GRC solutions and software selection