86% of IT, security, risk, and compliance professionals have a centralized team to manage GRC.

Publisher	Hyperproof
Report	2026 IT Risk and Compliance Benchmark Report
Published	12 February 2026
Topics	GRC

Published by Hyperproof in 2026 IT Risk and Compliance Benchmark Report, 12 February 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

56% of IT, security, risk, and compliance professionals use a common controls framework (CCF) to streamline GRC processes.

Hyperproof, 14/02/2026

14% of IT, security, risk, and compliance professionals manage GRC via individual teams or business units.

Hyperproof, 14/02/2026

11% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to GRC.

IANS Research & Artico Search, 16/10/2025

66% of security services providers primarily use a GRC or compliance automation platform.

Apptega, 29/07/2025

Only 29% of all organisations say their compliance programmes consistently meet internal and external standards.

Swimlane, 15/04/2025

92% of respondents rely on three or more tools to gather audit evidence.

Swimlane, 15/04/2025

Get the newsletter

Weekly cybersecurity statistics by email.