As the governance, risk, and compliance (GRC) market has matured, shifts in underlying investment drivers and solution implementation options have placed greater emphasis on the value offered by GRC. First-generation GRC evaluations and investment decisions largely turned on regulatory demands and requirements satisfaction. Blue Hill  Research analyzed 25 GRC deployments in order to identify decisions and practices that helped organizations to minimize the time and cost required in implementation.