# Do regulatory pressures mean GRC budgets must be growing?

**No market-wide budget-growth conclusion can be drawn from this sample.** It identifies responsibilities employers advertised, not net hiring, total expenditure or the reasons each vacancy exists.

There is also relevant counterevidence to an uncomplicated growth narrative. Compliance Week’s May 2026 coverage of Maurice Crescenzi’s remarks reported concerns about flat or shrinking budgets. That is practitioner context rather than a representative US enterprise GRC budget measurement, but it is a reason not to equate increasing responsibilities with increasing resources. ([complianceweek.com](https://www.complianceweek.com/top-stories/maurice-l-crescenzi-jr-new-president-of-eci-compliance-week-calls-on-compliance-leaders-to-close-the-gap-between-risk-and-readiness/?utm_source=openai))

For banks, the 2023 interagency third-party guidance discusses sufficient staffing, expertise, authority and accountability for ongoing monitoring. However, on **11 September 2026**, agencies proposed replacement guidance; the Federal Reserve’s proposal page lists comments due **16 November 2026**. As of this research date, that proposal should not be represented as an already-finalised replacement or a new software-purchase mandate. ([federalreserve.gov](https://www.federalreserve.gov/frrs/guidance/interagency-guidance-on-third-party-relationships.htm?utm_source=openai))

**Our procurement interpretation:** justify the staffing and platform scope against your actual workload, risk profile and applicable requirements. Do not use a regulatory headline as a substitute for a role-by-role operating plan.