Buyers Guide - Governance, Risk, & Compliance (GRC)

Please rate the completeness of your company's GRC solutions and services in each area below. Your responses will inform your company is position in the Buyers Guide for GRC technologies and services. Thank you for your participation.

Question Title

* 1. Section 1 - Enterprise Risk and Compliance

	No Capbility	Minimal Capability	Partial Capability	Major Capability	Full Capability
Risk identification	Risk identification No Capbility	Risk identification Minimal Capability	Risk identification Partial Capability	Risk identification Major Capability	Risk identification Full Capability
Risk assessment	Risk assessment No Capbility	Risk assessment Minimal Capability	Risk assessment Partial Capability	Risk assessment Major Capability	Risk assessment Full Capability
Risk mitigation	Risk mitigation No Capbility	Risk mitigation Minimal Capability	Risk mitigation Partial Capability	Risk mitigation Major Capability	Risk mitigation Full Capability
Monitoring and reporting	Monitoring and reporting No Capbility	Monitoring and reporting Minimal Capability	Monitoring and reporting Partial Capability	Monitoring and reporting Major Capability	Monitoring and reporting Full Capability
Compliance management	Compliance management No Capbility	Compliance management Minimal Capability	Compliance management Partial Capability	Compliance management Major Capability	Compliance management Full Capability
Policy and procedure management	Policy and procedure management No Capbility	Policy and procedure management Minimal Capability	Policy and procedure management Partial Capability	Policy and procedure management Major Capability	Policy and procedure management Full Capability

Question Title

* 2. Section 2 - Segregation of Duties (SoD)

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Role definition	Role definition No Capability	Role definition Minimal Capability	Role definition Partial Capability	Role definition Major Capability	Role definition Full Capability
Conflict identification	Conflict identification No Capability	Conflict identification Minimal Capability	Conflict identification Partial Capability	Conflict identification Major Capability	Conflict identification Full Capability
Conflict resolution	Conflict resolution No Capability	Conflict resolution Minimal Capability	Conflict resolution Partial Capability	Conflict resolution Major Capability	Conflict resolution Full Capability
Access control	Access control No Capability	Access control Minimal Capability	Access control Partial Capability	Access control Major Capability	Access control Full Capability
Audit trail and monitoring of access	Audit trail and monitoring of access No Capability	Audit trail and monitoring of access Minimal Capability	Audit trail and monitoring of access Partial Capability	Audit trail and monitoring of access Major Capability	Audit trail and monitoring of access Full Capability
User training	User training No Capability	User training Minimal Capability	User training Partial Capability	User training Major Capability	User training Full Capability

Question Title

* 3. Section 3 - Process Control

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Process mapping	Process mapping No Capability	Process mapping Minimal Capability	Process mapping Partial Capability	Process mapping Major Capability	Process mapping Full Capability
Internal control design and implementation	Internal control design and implementation No Capability	Internal control design and implementation Minimal Capability	Internal control design and implementation Partial Capability	Internal control design and implementation Major Capability	Internal control design and implementation Full Capability
Control testing and evaluation	Control testing and evaluation No Capability	Control testing and evaluation Minimal Capability	Control testing and evaluation Partial Capability	Control testing and evaluation Major Capability	Control testing and evaluation Full Capability
Monitoring and reporting of process performance	Monitoring and reporting of process performance No Capability	Monitoring and reporting of process performance Minimal Capability	Monitoring and reporting of process performance Partial Capability	Monitoring and reporting of process performance Major Capability	Monitoring and reporting of process performance Full Capability
Continuous improvement and remediation	Continuous improvement and remediation No Capability	Continuous improvement and remediation Minimal Capability	Continuous improvement and remediation Partial Capability	Continuous improvement and remediation Major Capability	Continuous improvement and remediation Full Capability
Automation and workflow integration	Automation and workflow integration No Capability	Automation and workflow integration Minimal Capability	Automation and workflow integration Partial Capability	Automation and workflow integration Major Capability	Automation and workflow integration Full Capability

Question Title

* 4. Section 4 - Audit Management

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Audit planning	Audit planning No Capability	Audit planning Minimal Capability	Audit planning Partial Capability	Audit planning Major Capability	Audit planning Full Capability
Audit execution	Audit execution No Capability	Audit execution Minimal Capability	Audit execution Partial Capability	Audit execution Major Capability	Audit execution Full Capability
Audit findings management	Audit findings management No Capability	Audit findings management Minimal Capability	Audit findings management Partial Capability	Audit findings management Major Capability	Audit findings management Full Capability
Reporting	Reporting No Capability	Reporting Minimal Capability	Reporting Partial Capability	Reporting Major Capability	Reporting Full Capability
Follow-up actions	Follow-up actions No Capability	Follow-up actions Minimal Capability	Follow-up actions Partial Capability	Follow-up actions Major Capability	Follow-up actions Full Capability
Continuous audit improvement program	Continuous audit improvement program No Capability	Continuous audit improvement program Minimal Capability	Continuous audit improvement program Partial Capability	Continuous audit improvement program Major Capability	Continuous audit improvement program Full Capability

Question Title

* 5. Section 5 - Business Integrity Screening

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Data Collection	Data Collection No Capability	Data Collection Minimal Capability	Data Collection Partial Capability	Data Collection Major Capability	Data Collection Full Capability
Risk Assessment	Risk Assessment No Capability	Risk Assessment Minimal Capability	Risk Assessment Partial Capability	Risk Assessment Major Capability	Risk Assessment Full Capability
Alert Generation	Alert Generation No Capability	Alert Generation Minimal Capability	Alert Generation Partial Capability	Alert Generation Major Capability	Alert Generation Full Capability
Case Management	Case Management No Capability	Case Management Minimal Capability	Case Management Partial Capability	Case Management Major Capability	Case Management Full Capability
Continuous Monitoring	Continuous Monitoring No Capability	Continuous Monitoring Minimal Capability	Continuous Monitoring Partial Capability	Continuous Monitoring Major Capability	Continuous Monitoring Full Capability

Question Title

* 6. Section 6 - Watch List Screening

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
List Integration	List Integration No Capability	List Integration Minimal Capability	List Integration Partial Capability	List Integration Major Capability	List Integration Full Capability
Screening Automation	Screening Automation No Capability	Screening Automation Minimal Capability	Screening Automation Partial Capability	Screening Automation Major Capability	Screening Automation Full Capability
Alert Management	Alert Management No Capability	Alert Management Minimal Capability	Alert Management Partial Capability	Alert Management Major Capability	Alert Management Full Capability
Reporting	Reporting No Capability	Reporting Minimal Capability	Reporting Partial Capability	Reporting Major Capability	Reporting Full Capability
Regular Updates	Regular Updates No Capability	Regular Updates Minimal Capability	Regular Updates Partial Capability	Regular Updates Major Capability	Regular Updates Full Capability
Compliance Assurance	Compliance Assurance No Capability	Compliance Assurance Minimal Capability	Compliance Assurance Partial Capability	Compliance Assurance Major Capability	Compliance Assurance Full Capability

Question Title

* 7. Section 7 - Global Trade Services

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Trade compliance management	Trade compliance management No Capability	Trade compliance management Minimal Capability	Trade compliance management Partial Capability	Trade compliance management Major Capability	Trade compliance management Full Capability
Import/export documentation and controls	Import/export documentation and controls No Capability	Import/export documentation and controls Minimal Capability	Import/export documentation and controls Partial Capability	Import/export documentation and controls Major Capability	Import/export documentation and controls Full Capability
Trade data management and reporting	Trade data management and reporting No Capability	Trade data management and reporting Minimal Capability	Trade data management and reporting Partial Capability	Trade data management and reporting Major Capability	Trade data management and reporting Full Capability
Denied party screening	Denied party screening No Capability	Denied party screening Minimal Capability	Denied party screening Partial Capability	Denied party screening Major Capability	Denied party screening Full Capability
Customs and duty management	Customs and duty management No Capability	Customs and duty management Minimal Capability	Customs and duty management Partial Capability	Customs and duty management Major Capability	Customs and duty management Full Capability
Trade agreement and preference management	Trade agreement and preference management No Capability	Trade agreement and preference management Minimal Capability	Trade agreement and preference management Partial Capability	Trade agreement and preference management Major Capability	Trade agreement and preference management Full Capability

Question Title

* 8. Section 8 -Enterprise Threat Detection

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Threat intelligence gathering and analysis	Threat intelligence gathering and analysis No Capability	Threat intelligence gathering and analysis Minimal Capability	Threat intelligence gathering and analysis Partial Capability	Threat intelligence gathering and analysis Major Capability	Threat intelligence gathering and analysis Full Capability
Security event monitoring and correlation	Security event monitoring and correlation No Capability	Security event monitoring and correlation Minimal Capability	Security event monitoring and correlation Partial Capability	Security event monitoring and correlation Major Capability	Security event monitoring and correlation Full Capability
Intrusion detection and prevention	Intrusion detection and prevention No Capability	Intrusion detection and prevention Minimal Capability	Intrusion detection and prevention Partial Capability	Intrusion detection and prevention Major Capability	Intrusion detection and prevention Full Capability
Vulnerability scanning and management	Vulnerability scanning and management No Capability	Vulnerability scanning and management Minimal Capability	Vulnerability scanning and management Partial Capability	Vulnerability scanning and management Major Capability	Vulnerability scanning and management Full Capability
Incident response and remediation	Incident response and remediation No Capability	Incident response and remediation Minimal Capability	Incident response and remediation Partial Capability	Incident response and remediation Major Capability	Incident response and remediation Full Capability
Security information and event management (SIEM)	Security information and event management (SIEM) No Capability	Security information and event management (SIEM) Minimal Capability	Security information and event management (SIEM) Partial Capability	Security information and event management (SIEM) Major Capability	Security information and event management (SIEM) Full Capability

Question Title

* 9. Section 9 - Privacy Governance

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Data privacy policy development and enforcement	Data privacy policy development and enforcement No Capability	Data privacy policy development and enforcement Minimal Capability	Data privacy policy development and enforcement Partial Capability	Data privacy policy development and enforcement Major Capability	Data privacy policy development and enforcement Full Capability
Privacy impact assessments	Privacy impact assessments No Capability	Privacy impact assessments Minimal Capability	Privacy impact assessments Partial Capability	Privacy impact assessments Major Capability	Privacy impact assessments Full Capability
Consent management and data subject rights	Consent management and data subject rights No Capability	Consent management and data subject rights Minimal Capability	Consent management and data subject rights Partial Capability	Consent management and data subject rights Major Capability	Consent management and data subject rights Full Capability
Data breach notification and response	Data breach notification and response No Capability	Data breach notification and response Minimal Capability	Data breach notification and response Partial Capability	Data breach notification and response Major Capability	Data breach notification and response Full Capability
Privacy compliance audits and reporting	Privacy compliance audits and reporting No Capability	Privacy compliance audits and reporting Minimal Capability	Privacy compliance audits and reporting Partial Capability	Privacy compliance audits and reporting Major Capability	Privacy compliance audits and reporting Full Capability

Question Title

* 10. Section 10 - Identity Access Governance

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
User provisioning and deprovisioning	User provisioning and deprovisioning No Capability	User provisioning and deprovisioning Minimal Capability	User provisioning and deprovisioning Partial Capability	User provisioning and deprovisioning Major Capability	User provisioning and deprovisioning Full Capability
Role-based access control	Role-based access control No Capability	Role-based access control Minimal Capability	Role-based access control Partial Capability	Role-based access control Major Capability	Role-based access control Full Capability
User access certification and attestation	User access certification and attestation No Capability	User access certification and attestation Minimal Capability	User access certification and attestation Partial Capability	User access certification and attestation Major Capability	User access certification and attestation Full Capability
Segregation of duties enforcement	Segregation of duties enforcement No Capability	Segregation of duties enforcement Minimal Capability	Segregation of duties enforcement Partial Capability	Segregation of duties enforcement Major Capability	Segregation of duties enforcement Full Capability
Privileged access management	Privileged access management No Capability	Privileged access management Minimal Capability	Privileged access management Partial Capability	Privileged access management Major Capability	Privileged access management Full Capability
Identity and access policy enforcement	Identity and access policy enforcement No Capability	Identity and access policy enforcement Minimal Capability	Identity and access policy enforcement Partial Capability	Identity and access policy enforcement Major Capability	Identity and access policy enforcement Full Capability

Question Title

* 11. Section 11 - Access Control

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Access control policy development and enforcement	Access control policy development and enforcement No Capability	Access control policy development and enforcement Minimal Capability	Access control policy development and enforcement Partial Capability	Access control policy development and enforcement Major Capability	Access control policy development and enforcement Full Capability
User authentication and authorization	User authentication and authorization No Capability	User authentication and authorization Minimal Capability	User authentication and authorization Partial Capability	User authentication and authorization Major Capability	User authentication and authorization Full Capability
Access request and approval workflows	Access request and approval workflows No Capability	Access request and approval workflows Minimal Capability	Access request and approval workflows Partial Capability	Access request and approval workflows Major Capability	Access request and approval workflows Full Capability
Access control monitoring and logging	Access control monitoring and logging No Capability	Access control monitoring and logging Minimal Capability	Access control monitoring and logging Partial Capability	Access control monitoring and logging Major Capability	Access control monitoring and logging Full Capability
User activity and behavior analytics	User activity and behavior analytics No Capability	User activity and behavior analytics Minimal Capability	User activity and behavior analytics Partial Capability	User activity and behavior analytics Major Capability	User activity and behavior analytics Full Capability
Centralized access control administration	Centralized access control administration No Capability	Centralized access control administration Minimal Capability	Centralized access control administration Partial Capability	Centralized access control administration Major Capability	Centralized access control administration Full Capability

Question Title

* 12. Section 12 - Sustainability

	No Capability	Minimal Capability	Partial Capability	Major Capability	Full Capability
Sustainability Strategy	Sustainability Strategy No Capability	Sustainability Strategy Minimal Capability	Sustainability Strategy Partial Capability	Sustainability Strategy Major Capability	Sustainability Strategy Full Capability
Environmental Management	Environmental Management No Capability	Environmental Management Minimal Capability	Environmental Management Partial Capability	Environmental Management Major Capability	Environmental Management Full Capability
Social Responsibility	Social Responsibility No Capability	Social Responsibility Minimal Capability	Social Responsibility Partial Capability	Social Responsibility Major Capability	Social Responsibility Full Capability
Economic Sustainability	Economic Sustainability No Capability	Economic Sustainability Minimal Capability	Economic Sustainability Partial Capability	Economic Sustainability Major Capability	Economic Sustainability Full Capability
Reporting and Disclosure	Reporting and Disclosure No Capability	Reporting and Disclosure Minimal Capability	Reporting and Disclosure Partial Capability	Reporting and Disclosure Major Capability	Reporting and Disclosure Full Capability

Question Title

* 13. Organization Name

Question Title

* 14. Please list your organization's technologies, solutions, or services that should be considered for this guide.

Question Title

* 15. Your Name (this will not be published in the Buyers Guide)

Question Title

* 16. Your Title (this will not be published in the Buyers Guide)

Question Title

* 17. Your Email Address (this will not be published in the Buyers Guide)