enterprise special interests
smb special interests
industry special interests









Leaders spend less time on compliance

Can you post better results and spend less time - and money - on compliance? The benchmarks show how to do it. Compare your results, time spent on compliance, and find out which activities should be prime candidates for automation. more...

Leaders spend 44 percent less

Can you improve results and spend less money? Based on recent benchmarks with 1,114 organizations the answer is yes, if you know what to do. Find out what works to drive down costs while improving results. more...

Benchmark your spend on compliance

Is your firms spending too much, too little, or somewhere in between? Find out how your spending on regulatory compliance compares. more...

How much will data loss or theft cost your organization?

The cost of data loss or theft includes lost customers, share-price declines, customer defections and revenue declines. What is your firms finacial exposure and risk? Find out what the most likely annual loss will be. more...

How often will you have a data loss or theft?

How likely is your firm to lose, or have stolen, sensitive data that will harm the reputation and brand of the firm, and result in financial consequences for the organization? See what the latest research says. more...

Organizations with the most data losses and thefts

Which organizations suffer from the highest levels of data loss and theft? Find out. more...

Organizations with the fewest data losses and thefts

Which organizations have the fewest losses and thefts of sensitive data? Find out. more...

What's the cause of data loss and theft?

The causes of data loss and theft may surprise you but probably shouldn't. Find out what's causing data theft and loss. more...

Prevent or fix: you decide!

Would you rather prevent data loss and theft, or suffer the consequences? See what others are doing. more...

What works: actions to reduce data theft and loss

What strategic actions are shared by firms with the least data loss and theft? Find out. more...

What works: frequency of controls assessment

One of the consistent hallmarks of firms with the least data loss/theft and the best regulatory compliance results are frequent assessments of the effectiveness of procedural and technical controls. See how your organization compares. more...

What works: audit more business functions

Data protection and compliance leaders audit more business functions than all others. FInd out how your organization compares. more...

What works: control objectives and controls

What's better: more controls or more control objectives (policies)? Find out which works and how your organization compares. more...

What works: effective IT change management

What do firms with the least data loss and best regulatory compliance records do different from all other organizations? Find out why IT change management is important and how IT governance, compliance and risk management are focused at this firms. more...

What works: detection of unauthorized use or change

Firms with the least loss or theft or sensitive data are detecting - in real-time - unauthorized use or change for very specific IT assets. Find out what these organziation are doing and how yuur firm compares. more...

What works: prevention of unauthorized use or change

Firms with the least data loss and theft and the best regulatory compliance results are leveraging the detection of unauthorized use and change to then prevent high-risk change to specific IT resources. FInd out what these firms do and how your organization compares. more...

Spend in IT to Improve Compliance Results

How much should IT be spending on IT security to improve compliance, and where should the spending be allocated? This Gudiance note summaries key findings from the benchmarks and identifies reliable metrics not subject to industry fluctuations. more...

Compliance Results among Large Enterprises

Are large enterprises ahead of the pack? Do more resources and experience automatically translate into better results for compliance? The fact-based findings might surprise you. Find out how your organization compares with the industry-at-large and which actions matter most to further improve results. more...

Actions to Improve Compliance Results: Large Enterprises

Which deficiencies are causing the most problems for large enterprises and what action plan will most improve results? Benchmark the IT compliance plans of your enterprise against industry leaders. more...

Which Key Performance Indicators Work?

Is your organization measuring too little, too much or not enough? Which key performance indictators drive better results for IT compliance? Find out what the IT compliance leaders are doing and how your organization compares. more...

IT Policy Compliance Frameworks: More are Better

Industry leaders are employing, on average, three policy compliance frameworks. Find out which policy compliance frameworks are the most widely used and why. more...

Best Practices: Organizational Structure

Do you merge internal controls and IT security to improve results? According to 73% of firms, this action has been taken or is underway. But does this action improve results? Find out what the benchmarks show. more...

Best Practices: Frequency of Monitoring

When 97 percent of industry leaders take the same action, is it meaningful? When it comes to performance results it is. Find out how your organization compares to what the industry leaders are doing to improve IT compliance results, how firms operating at the norm compare, and what the laggards are not doing. more...

Top 10 Strategic Actions to Improve Compliance Results

All of the best-in-class compliance organizations document business procedures, IT assets and IT controls. What are the top 10 strategic actions that are most going to improve results for compliance at your oeganization? more...

Most Deficient Compliance Controls: IT Security

The leading cause of compliance deficiencies among all organizations are found in IT, where seven-out-of-ten are directly related to deficiencies in IT security. How does your organization compare? more...







Most large enterprises are auditing and monitoring IT compliance once every 140 days whereas the industry leaders are conducting these measurements once every 21 days. more...



Latest Blog Topics:

Topic : New interactive benchmark tools: legal data hold
Topic : Legal discovery: Beyond the lawyer jokes
Topic : Spending on Legal Data Holds and Custody too High for Most