Most governance, risk and compliance strategies depend on some level of collaboration among finance, IT, operations and legal components. But for many companies, a lack of collaboration is preventing them from achieving GRC-related goals, according to a recent survey from the Ponemon Institute.

Fifty-six percent of practitioners say there is some collaboration on GRC across departments, 28 percent say collaboration is frequent, and 12 percent say the departments operate in silos, according to the Ponemon report.

Respondents cited other barriers to GRC goals, including a lack of resources, overly complex technologies and a lack of clear leadership.

When asked to name their organizations' two most salient privacy-related issues, over half of respondents picked ensuring that data shared with third parties remains safe, and 41 percent chose complying with all appropriate regulations. PCI DSS, state laws and Gramm-Leach-Bliley were the regulations that created the biggest compliance challenges.

The report, sponsored by security firm RSA, is based on survey responses from attendees of the RSA Archer eGRC Summit, and is subject to non-response and self-reporting biases.

For more:
- read the Ponemon Institute report (.pdf)

Related Articles:
Content chaos standing in the way of GRC integration
EMC attempts to simplify, unify governance, risk, compliance
Can compliance and collaboration live in harmony?