Waiting to reach maturity before adopting a technology may prove to be an opportunity cost. When an organization starts their GRC program on a clean slate, use of a technology may be a better choice.

Any time should be good time irrespective where the organization is on the GRC curve provided

There are well articulated problem statements

There is a benefit statement for every stakeholder

Well-articulated end results and key result indicators

There is a strong management will to get the project off the ground keeping productivity ROI in mind

There is a strong project leadership with milestones identified

The right vendor is selected

Unfortunately, selecting the right vendor and solution has become such a complex process, its reflecting on GRC as a complex discipline.

A good GRC tool should enable anyone to use it just like filing taxes online was made easier.