GRC 20/20
GRC 20/20 Research is a privately held boutique GRC analyst firm providing independent research, Solution Perspectives, and advisory services across 100+ governance, risk, and compliance technology vendors, serving enterprise GRC buyers and solution providers globally.
- Company typePrivate
- Founded2012
- HeadquartersMilwaukee, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What GRC 20/20 does
GRC 20/20 Research, LLC is a privately held, boutique governance, risk management, and compliance (GRC) research and advisory firm founded in 2012 and headquartered in Milwaukee, Wisconsin. The firm operates without proprietary technology products, instead producing market intelligence content — Solution Perspectives, Buyer Guides, Case Studies, Research Briefings, Strategy Perspectives, and Value Perspectives — covering 100+ GRC technology vendors and functional areas including Audit Management, IT GRC, Third Party Management, ESG, Policy & Training, and AI GRC. The firm is anchored by its founder Michael Rasmussen, recognized as the "Father of GRC" for being the first to define and model the GRC market in February 2002 during his tenure at Forrester Research.
GRC 20/20 generates revenue through three primary streams: (1) one-time/perpetual license sales of research publications distributed via its e-commerce website (grc2020.com), with some introductory content offered at no cost; (2) advisory and consulting services including RFP support, 20/20 Workshops, and direct advisory briefings; and (3) professional services revenue from in-person events such as Risk Appetite Dinners, webinars, and research briefings held globally. The firm targets organizations evaluating and selecting GRC technology solutions, enterprise GRC buyers and procurement teams, and GRC solution providers seeking market visibility and analyst coverage. The go-to-market approach is sales-led, relying on content marketing, thought leadership, direct advisory engagement, and industry event participation.
The firm operates with 1-10 employees and reaches a global audience across North America, Europe, and Asia Pacific through both digital distribution and in-person engagement. Sub-brands include "The GRC Pundit's Blog," the "Risk is Our Business" podcast, and "The Hitchhiker's Guide to the GRC Galaxy" podcast. GRC 20/20 is independently owned with no disclosed institutional investors, parent company, funding rounds, or M&A activity. Its competitive position rests on Rasmussen's personal brand, its established research library, and its multi-channel distribution rather than on technology differentiation.
GRC 20/20 firmographics
Firmographics- Name
- GRC 20/20
- Legal name
- GRC 20/20 Research, LLC
- Website
- https://grc2020.com
- Company type
- Private
- Founded year
- 2012
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- GRC 20/20 Research is a privately held boutique GRC analyst firm providing independent research, Solution Perspectives, and advisory services across 100+ governance, risk, and compliance technology vendors, serving enterprise GRC buyers and solution providers globally.
- Ownership category
- akta.pro rank
GRC 20/20 industry classification
Industry- Product category
- GRC Research and Advisory
- NAICS
- Management Consulting Services (54161), Other Management Consulting Services (541618), Management, Scientific, and Technical Consulting Services (5416)
- SIC
- Services-Management Consulting Services (8742), Services-Engineering, Accounting, Research, Management (8700)
- akta.pro primary industry
- Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO)
- akta.pro secondary industries
- Regulatory Change, Governance & Compliance Management (GRC) (FSACAJAK), ESG, Sustainability Reporting & Compliance (BPAEAPAM)
Keywords
Where GRC 20/20 is headquartered
LocationHeadquarters
- HQ city
- Milwaukee
- HQ country
- United States
- HQ region
- North America
Markets served
GRC 20/20 business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D
Revenue model
- Research Publications Sales: GRC 20/20 generates revenue through the sale of research publications including Solution Perspectives, Buyer Guides, Case Studies, Research Briefings, Strategy Perspectives, and Value Perspectives covering GRC solution providers and functional areas.
- Advisory and Consulting Services: The company provides advisory services including RFP support, 20/20 Workshops, and direct advisory briefings. These professional services complement the research publications.
- Events and Workshops: Revenue generated from hosting events including Risk Appetite Dinners, research briefings, webinars, and 20/20 Workshops held in various global locations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | Research publications including Solution Perspectives, Buyer Guides, Case Studies, and Research Briefings |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels6 records
GRC 20/20 product offering
Product offeringCore offering
GRC 20/20 Research, LLC is a boutique governance, risk management, and compliance (GRC) research and advisory firm that produces independent market research, Solution Perspectives, Buyer Guides, Case Studies, Research Briefings, Strategy Perspectives, and Value Perspectives covering 100+ GRC technology solution providers across functional areas such as audit management, compliance management, IT GRC, third-party risk, ESG, and policy and training. The firm also provides advisory services including RFP support, 20/20 Workshops, and direct advisory briefings to organizations evaluating and selecting GRC technology.
Product overview
GRC 20/20 Research, LLC is a governance, risk management, and compliance research and analyst firm that produces Solution Perspectives—detailed evaluations and analysis of third-party GRC technology solutions. The portfolio includes publications covering Soterion (internal control management and automation), SmartSuite (enterprise GRC architecture platforms), Source Intelligence Network (third-party management), and Skillsoft (policy and training management). These research products are organized by GRC functional area and solution provider, supporting organizations in evaluating and selecting GRC technology solutions.
Differentiator
Problem solved
Functional benefit
Brands
- The GRC Pundit's Blog: A blog by Michael Rasmussen covering GRC market analysis, insights, and commentary on governance, risk management, and compliance topics.
- Risk is Our Business
- Hitchhiker's Guide to the GRC Galaxy
Products and services
- GRC 20/20 Solution Perspective — Soterion GRC 20/20 research publication providing a solution perspective on Soterion's automated controls management platform, evaluating innovation in user experience for internal control management and automation. Targeted at organizations evaluating automated controls and GRC technology.
- GRC 20/20 Solution Perspective — SmartSuite GRC 20/20 solution perspective research publication evaluating SmartSuite's next-generation agile GRC enablement platform, covering enterprise GRC architecture and platforms for risk, compliance, and internal controls management. Targeted at organizations evaluating enterprise GRC platforms.
- GRC 20/20 Solution Perspective — Source Intelligence Network GRC 20/20 research publication covering Source Intelligence's third-party management solution, recognized with a 2015 GRC Innovation Award for best user experience in third-party management. Targeted at organizations evaluating third-party and supply chain risk solutions.
- GRC 20/20 Solution Perspective — Skillsoft GRC 20/20 solution perspective evaluating Skillsoft's compliance education and employee engagement platform, focused on policy and training management for front-line employees in distributed business environments. Targeted at organizations evaluating compliance training solutions.
- GRC 20/20 Advisory and Consulting Services Professional advisory services provided by GRC 20/20 including RFP support for GRC technology selection, 20/20 Workshops, and direct advisory briefings to organizations evaluating, selecting, and implementing GRC technology solutions.
- GRC 20/20 Workshops and Events In-person and virtual events hosted by GRC 20/20 including Risk Appetite Dinners in major cities, research briefings, webinars, and 20/20 Workshops covering GRC topics, technology evolution, and industry trends for enterprise GRC professionals.
Companies that use GRC 20/20
Customer profileSegments3 records
Ideal customer profiles1 record
GRC 20/20 technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
GRC 20/20 partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered coverage.
- 6clickscoverageGRC 20/20 provides solution perspectives and market coverage of 6clicks as part of its comprehensive GRC vendor research library.
- AuditBoardcoverageGRC 20/20 provides solution perspectives and market coverage of AuditBoard as part of its comprehensive GRC vendor research library.
- DiligentcoverageGRC 20/20 provides solution perspectives and market coverage of Diligent as part of its comprehensive GRC vendor research library.
- MetricStreamcoverageGRC 20/20 provides solution perspectives and market coverage of MetricStream as part of its comprehensive GRC vendor research library.
- ServiceNowcoverageGRC 20/20 provides solution perspectives and market coverage of ServiceNow's GRC capabilities as part of its comprehensive GRC vendor research library.
- SAPcoverageGRC 20/20 provides solution perspectives and market coverage of SAP's GRC solutions as part of its comprehensive GRC vendor research library.
- WorkivacoverageGRC 20/20 provides solution perspectives and market coverage of Workiva as part of its comprehensive GRC vendor research library.
- Thomson ReuterscoverageGRC 20/20 provides solution perspectives and market coverage of Thomson Reuters GRC offerings as part of its comprehensive GRC vendor research library.
- OneTrustcoverageGRC 20/20 provides solution perspectives and market coverage of OneTrust's privacy and GRC solutions as part of its comprehensive GRC vendor research library.
- Wolters Kluwer (ELM Solutions & TeamMate)coverageGRC 20/20 provides solution perspectives and market coverage of Wolters Kluwer ELM Solutions and TeamMate as part of its comprehensive GRC vendor research library.
Scale indicators1 record
Recent moves5 records
Expansion highlights4 records
GRC 20/20 competitors and assessment
Company assessmentMarket position
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
GRC 20/20 social profiles
Digital presenceGRC 20/20 financial estimates
Financial estimateRevenue estimate
Valuation estimate
GRC 20/20 leadership team
Management profileNumber of profiles
Profiles1 record
GRC 20/20 funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
GRC 20/20 M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about GRC 20/20
What does GRC 20/20 do?
GRC 20/20 Research, LLC is a boutique governance, risk management, and compliance (GRC) research and advisory firm that produces independent market research, Solution Perspectives, Buyer Guides, Case Studies, Research Briefings, Strategy Perspectives, and Value Perspectives covering 100+ GRC technology solution providers across functional areas such as audit management, compliance management, IT GRC, third-party risk, ESG, and policy and training. The firm also provides advisory services including RFP support, 20/20 Workshops, and direct advisory briefings to organizations evaluating and selecting GRC technology.
Is GRC 20/20 a public or private company?
GRC 20/20 is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was GRC 20/20 founded?
GRC 20/20 was founded in 2012. It employs 1 to 10 people.
Where is GRC 20/20 based?
GRC 20/20 is headquartered in Milwaukee, United States, in the North America region.
How does GRC 20/20 make money?
Three revenue lines are on record. Research Publications Sales are the primary driver. The others are advisory and Consulting Services and events and Workshops.
Does GRC 20/20 have an API?
No public API is recorded for GRC 20/20.
What industry is GRC 20/20 in?
GRC 20/20's product category is GRC Research and Advisory. Its primary akta.pro industry code is BPAHAFAO, Compliance Technology, GRC Platforms & Controls Automation Advisory, with a secondary code of FSACAJAK, Regulatory Change, Governance & Compliance Management (GRC). Its NAICS code is 54161 and its SIC code is 8742.