This blog is to respond to the attendee questions we didn't get to on today's roundtable: Aligning GRC Technology with your GRC Program. I have posted the questions below and our speakers will aim to respond (by comment) within 72 hours.

1. Is it reasonable to expect that very large organizations (e.g., AIG, Citigroup, other global companies) have a centralized GRC program, or is it acceptable to have more region-specific programs?
2. Jean-Marie, you talked earlier about multiple stakeholders and board level involvement.  At what point does the decision maker who will buy GRC technology or services actually interact with the Board?  Many of these buyers are far down in the organization, especially in IT GRC.
3. Chris, do you see a shift from development platform-like products to more off the shelf solutions, ones that do not require many months and large amounts of money to prepare and deploy.
4. Anindo, given that larger, broader grc implementations involve more and more stakeholders, how do you communicate the value proposition to so many different stakeholders?
5. Is there any benchmarking data availabale for cost of implementing a GRC platform and integrating to your organisation?
6. Most GRC projects start out with a business benefits case....is there any data about whether those benefits were actually realised and the ROI achieved?