Most people assume that so-called GRC software--governance, risk and compliance--will continue to gather steam, as big boys like Oracle and SAP continue their marketing. It makes sense to automate compliance and risk issues, but the reality of this nascent field is that there really isn't a single point solution. Sure the big guys offer lots of functionality, but you have to weigh that against your budget and specific needs. There are plenty of small vendors out there leaving their marks. Movaris, for example, recently was bought by Trintech, which will round out its service offering for CFOs. John Hagerty of AMR makes the point that most GRC solutions are bought and implemented within silos. While all companies want to offer a complete set of services, the reality is that most companies will have to mix and match to get their optimal solution. 

For more:
- here's a note [1] from Hagerty