Sources

Official product material establishes published scope, not independently verified performance. Version-specific documentation is identified in the text; buyers should reconfirm it for the release and contract being evaluated. URLs are provided below for editorial verification.

Platforms, product scope and commercial evidence

1. ServiceNow — Integrated Risk Management: https://www.servicenow.com/products/integrated-risk-management.html
2. ServiceNow — 16 July 2026 Now Assist Suite release notes: https://www.servicenow.com/docs/r/store-release-notes/na-suite-rn-2026-07-16.html
3. Archer — Platform documentation: https://help.archerirm.cloud/platform_202508/en-us/content/platform/gettingstarted/platform_welcome.htm
4. Archer — Deployment introduction: https://help.archerirm.cloud/platform_2024_09/en-us/content/platform/gettingstarted/getting_started.htm
5. Archer — IT Security Risk Management Integration Guide: https://help.archerirm.cloud/archersolutions/en-us/Content/ArcherSolutions/itsrm_integration_guide.htm
6. Archer — ServiceNow integration: https://community.archerirm.com/hc/en-us/articles/52147531080467-Introducing-the-ServiceNow-Integration-with-Archer-Seamless-Data-Synchronization-for-Enhanced-Risk-Management
7. IBM — OpenPages overview: https://www.ibm.com/products/openpages
8. IBM — OpenPages pricing and deployment exclusions: https://www.ibm.com/products/openpages/pricing
9. IBM — OpenPages 9.2 announcement: https://www.ibm.com/new/announcements/ibm-openpages-9-2-brings-ai-into-the-execution-layer-of-grc
10. IBM — OpenPages 9.1 data-export documentation: https://www.ibm.com/docs/en/openpages/9.1.x?topic=ci-exporting-openpages-data-be-used-by-other-applications
11. Optro — AuditBoard rebrand announcement, 9 March 2026: https://optro.ai/blog/meet-optro-auditboard-unveils-new-identity-as-ai-transforms-grc
12. Optro — Controls Management: https://optro.ai/product/controls-management
13. Workiva — SOX Compliance: https://www.workiva.com/solutions/sox-compliance
14. MetricStream — Integrated GRC scope: https://www.metricstream.com/insights/integrated-grc.htm
15. LogicGate — Risk Cloud services description: https://www.logicgate.ai/services-description/
16. LogicGate — Pricing model: https://www.logicgate.ai/platform/pricing/
17. Diligent — Internal Audit Management: https://www.diligent.com/landing/audit-quick-start/
18. SureCloud — Plans: https://www.surecloud.com/plans
19. Vanta — GRC product: https://www.vanta.com/products/grc
20. Drata — Enterprise GRC: https://drata.com/products/enterprise-grc
21. Hyperproof — Risk Management: https://hyperproof.io/product/risk-management/
22. Hyperproof — Integration types: https://help.hyperproof.app/en/articles/12875244-explaining-hyperproof-integrations
23. Ncontracts — Banking risk and compliance: https://www.ncontracts.com/bank-risk-management
24. Censinet — Healthcare platform scope: https://censinet.com/

Regulators and professional bodies

25. OCC, Federal Reserve and FDIC — Third-party risk-management guidance announcement: https://www.occ.gov/news-issuances/news-releases/2023/nr-ia-2023-53.html
26. HHS — Guidance on Risk Analysis: https://www.hhs.gov/hipaa/for-professionals/security/guidance/guidance-risk-analysis/index.html
27. PCAOB — AS 2201: https://pcaobus.org/oversight/standards/auditing-standards/details/AS2201
28. The IIA — Global Internal Audit Standards, including Standard 7.1: https://www.theiia.org/globalassets/site/standards/globalinternalauditstandards_2024january9.pdf
29. NIST — Generative Artificial Intelligence Profile, AI 600-1: https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf

Implementation, staffing and practitioner context

30. Edgile — Legacy GRC migration webinar description: https://edgile.com/videos/making-a-successful-migration-from-a-legacy-grc-solution-to-servicenow-irm-video/
31. Meditology — Healthcare GRC enablement: https://www.meditologyservices.com/grc-enablement-for-healthcare-organizations/
32. First Horizon recruitment portal — Senior GRC Administrator posting, April 2026; indexed description used, live page dynamically rendered: https://recruiting.ultipro.com/FIR1007FTN/JobBoard/c005ef3e-175a-49c4-ba29-9f431f673944/OpportunityDetail?opportunityId=3d3259bf-0bb5-474b-8eb4-639fe8f63a6b
33. CoreStream — Supplier-hosted podcast discussion and condensed transcript, June 2026: https://corestreamgrc.com/resources/blog/grc-technology-podcast-michael-rasmussen/
34. GRC Report — Architecture-focused analyst commentary, October 2026: https://www.grcreport.com/post/why-grc-architecture-matters-more-than-ever-in-the-age-of-ai