Published: 06 August 2019
Summary
Integrated risk management solutions ensure consistent risk management, while collecting enterprise risk data for reporting and decision making. Security and risk management leaders should use this research to identify capabilities and vendors suitable for their IRM projects.
Included in Full Research
- Critical Capabilities Use-Case Graphics
- Vendors
- BWise
- CAMMS
- CURA Software
- Dell Technologies (RSA)
- Galvanize (ACL)
- Galvanize (Rsam)
- IBM
- Ideagen
- Lockpath
- LogicManager
- MetricStream
- Refinitiv
- Resolver
- Riskonnect
- SAI Global
- ServiceNow
- SureCloud
- Context
- Product/Service Class Definition
- Critical Capabilities Definition
- Risk & Control Document/Assessment
- Incident Management
- Risk Mitigation Action Planning
- KRI Monitoring and Reporting
- Risk Quantification and Analytics
- Use Cases
- Business-Outcome-Centric
- Operation-Centric
- Compliance-Centric
- Vendors Added and Dropped
- Critical Capabilities Rating
Overview
Key Findings
Integrated risk management projects consolidate risk management processes and data analyses. Compared with manual or siloed automation processes, these projects usually achieve better compliance, more effective executive-level communication and risk-based business outcomes.
Risks amplified by digital technology adoptions and privacy compliance complexities are the leading factors for risk management process change and new demands on risk analytics.
The IRM solution market is highly fragmented, with two main types of vendors: IRM platform providers with comprehensive features addressing multiple risk domains, and pure-play providers focused on specific domains or sets of capabilities.
Recommendations
Security and risk management leaders looking to simplify, automate and
To view the entire document, log
in or purchase