# Sources

Official product material establishes published scope, not independently verified performance. Version-specific documentation is identified in the text; buyers should reconfirm it for the release and contract being evaluated. URLs are provided below for editorial verification.

### Platforms, product scope and commercial evidence

1. ServiceNow — Integrated Risk Management: `https://www.servicenow.com/products/integrated-risk-management.html`
2. ServiceNow — 16 July 2026 Now Assist Suite release notes: `https://www.servicenow.com/docs/r/store-release-notes/na-suite-rn-2026-07-16.html`
3. Archer — Platform documentation: `https://help.archerirm.cloud/platform_202508/en-us/content/platform/gettingstarted/platform_welcome.htm`
4. Archer — Deployment introduction: `https://help.archerirm.cloud/platform_2024_09/en-us/content/platform/gettingstarted/getting_started.htm`
5. Archer — IT Security Risk Management Integration Guide: `https://help.archerirm.cloud/archersolutions/en-us/Content/ArcherSolutions/itsrm_integration_guide.htm`
6. Archer — ServiceNow integration: `https://community.archerirm.com/hc/en-us/articles/52147531080467-Introducing-the-ServiceNow-Integration-with-Archer-Seamless-Data-Synchronization-for-Enhanced-Risk-Management`
7. IBM — OpenPages overview: `https://www.ibm.com/products/openpages`
8. IBM — OpenPages pricing and deployment exclusions: `https://www.ibm.com/products/openpages/pricing`
9. IBM — OpenPages 9.2 announcement: `https://www.ibm.com/new/announcements/ibm-openpages-9-2-brings-ai-into-the-execution-layer-of-grc`
10. IBM — OpenPages 9.1 data-export documentation: `https://www.ibm.com/docs/en/openpages/9.1.x?topic=ci-exporting-openpages-data-be-used-by-other-applications`
11. Optro — AuditBoard rebrand announcement, 9 March 2026: `https://optro.ai/blog/meet-optro-auditboard-unveils-new-identity-as-ai-transforms-grc`
12. Optro — Controls Management: `https://optro.ai/product/controls-management`
13. Workiva — SOX Compliance: `https://www.workiva.com/solutions/sox-compliance`
14. MetricStream — Integrated GRC scope: `https://www.metricstream.com/insights/integrated-grc.htm`
15. LogicGate — Risk Cloud services description: `https://www.logicgate.ai/services-description/`
16. LogicGate — Pricing model: `https://www.logicgate.ai/platform/pricing/`
17. Diligent — Internal Audit Management: `https://www.diligent.com/landing/audit-quick-start/`
18. SureCloud — Plans: `https://www.surecloud.com/plans`
19. Vanta — GRC product: `https://www.vanta.com/products/grc`
20. Drata — Enterprise GRC: `https://drata.com/products/enterprise-grc`
21. Hyperproof — Risk Management: `https://hyperproof.io/product/risk-management/`
22. Hyperproof — Integration types: `https://help.hyperproof.app/en/articles/12875244-explaining-hyperproof-integrations`
23. Ncontracts — Banking risk and compliance: `https://www.ncontracts.com/bank-risk-management`
24. Censinet — Healthcare platform scope: `https://censinet.com/`

### Regulators and professional bodies

25. OCC, Federal Reserve and FDIC — Third-party risk-management guidance announcement: `https://www.occ.gov/news-issuances/news-releases/2023/nr-ia-2023-53.html`
26. HHS — Guidance on Risk Analysis: `https://www.hhs.gov/hipaa/for-professionals/security/guidance/guidance-risk-analysis/index.html`
27. PCAOB — AS 2201: `https://pcaobus.org/oversight/standards/auditing-standards/details/AS2201`
28. The IIA — Global Internal Audit Standards, including Standard 7.1: `https://www.theiia.org/globalassets/site/standards/globalinternalauditstandards_2024january9.pdf`
29. NIST — Generative Artificial Intelligence Profile, AI 600-1: `https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf`

### Implementation, staffing and practitioner context

30. Edgile — Legacy GRC migration webinar description: `https://edgile.com/videos/making-a-successful-migration-from-a-legacy-grc-solution-to-servicenow-irm-video/`
31. Meditology — Healthcare GRC enablement: `https://www.meditologyservices.com/grc-enablement-for-healthcare-organizations/`
32. First Horizon recruitment portal — Senior GRC Administrator posting, April 2026; indexed description used, live page dynamically rendered: `https://recruiting.ultipro.com/FIR1007FTN/JobBoard/c005ef3e-175a-49c4-ba29-9f431f673944/OpportunityDetail?opportunityId=3d3259bf-0bb5-474b-8eb4-639fe8f63a6b`
33. CoreStream — Supplier-hosted podcast discussion and condensed transcript, June 2026: `https://corestreamgrc.com/resources/blog/grc-technology-podcast-michael-rasmussen/`
34. GRC Report — Architecture-focused analyst commentary, October 2026: `https://www.grcreport.com/post/why-grc-architecture-matters-more-than-ever-in-the-age-of-ai`