I’m proud to announce that this week Forrester launched our Governance, Risk, and Compliance Playbook, a collection of in-depth reports covering the critical information you need to implement a successful GRC program… one that focuses on supporting business success, not getting in its way.

First, because risk and compliance are always such quickly moving targets, we included reports to help you plan for the future of GRC and build a business case for why it’s important to invest in your program now.

Next, to make sure your GRC plan is comprehensive and can achieve success, we offer guidance on creating a GRC strategy and making sense of the very complicated GRC technology landscape.

Then, we show you best practices for actually implementing GRC processes in your organization with reports on how to designate clear lines of accountability and establish effective risk management capabilities.

Finally, in order to help you maintain a successful program in the face of constantly changing internal and external requirements, we offer reports on how to optimize your GRC program for the future and how to maintain a culture of continual improvement.

This Playbook represents countless hours of dedicated research, hundreds of interviews and survey responses, and great input from technology and services vendors in the space. Personally, I’d also like to thank my colleague Nick Hayes for truly superb research over the past year as well.

Of course, our work is not done. Our (growing!) team will continue to update these reports and complement them with tools, Waves, and other reports all aiming to help you build and maintain effective governance, risk, and compliance programs.

As always, we look forward to working with you on future research, and we welcome any comments.