As the governance, risk, and compliance market matures, product vendors and potential buyers alike are struggling to make the case for GRC implementations. When possible, the GRC proposition should be driven by a vision of better governance and performance, but when pressed for more specific justification, the following factors will help provide specific supporting evidence. Make cost and benefit projections at least three years out to come up with benefits that are comparable to long-term compliance with other functions such as audit and business continuity.”]
Source: https://www.csoonline.com/article/2128407/making-the-roi-case-for-grc-platforms.html