Hope some of these questions would help if you are or when you would be evaluating GRC solutions:
- What is the best GRC solution available for my industry?
- Am I using the appropriate IT GRC solution?
- How do I find out if I'm using an appropriate solution?
- How do I find out other solutions in the market?
- How do I find out what others from my industry are using?
- How do I find out their experience about solutions used by them?
- Which are the strengths and weaknesses?
- What is their experience?
- Which are the most mature modules or solutions such as Risk or Compliance?
- Am I benefiting from all the features?
- How do I optimize my solution?
- Have I configured it correctly?
- How do I enable users to use the solution in a simple, easier and seamless manner?
- How do I get my users accustomed to the solution quickly and effectively?
- How do I get my vendor to support with a new feature if that could be useful to all others?
- Do I know shortcomings in the solution?
- Why did I not find out these shortcomings during product evaluation?
- Which are the unusable features?
- What is my vendor’s financial stability?
- What’s my vendors vision and road-map for their solution
- How long will my vendor support me for their solution?
- How can I get vendor agnostic opinion about various solutions?
- Is there an inexpensive way to learn about the current solutions?
- How do I reduce time taken to test and evaluate the shortlisted solutions?
- How far can I rely on my consulting partner given their partnerships & revenue pressures?
- How do I demonstrate value/ROI from the solution I selected?
