The RiskTech Journal
The RiskTech Journal is your premier source for insights on cutting-edge risk management technologies. We deliver expert analysis, industry trends, and practical solutions to help professionals stay ahead in an ever-changing risk landscape. Join us to explore the innovations shaping the future of risk management.
IRM Market Brief: September 15 to 21, 2026
Archer put digital employees to work inside the GRC system of record last Monday. By Tuesday, Workiva had handed its customers a no-code studio to build their own. That is the week the core IRM platforms stopped describing agents as assistants and started shipping them as workers. Archer says dozens of its AI Operators are already running in customer environments across audit, third-party risk, IT risk and operational risk. Workiva's Agent Studio lets finance, audit and compliance teams create, customize and schedule agents on their own workflows, and it arrives with an agentic internal-control testing solution that runs evidence collection, sample selection and attribute testing end to end. Neither vendor named a customer with a measured result.
Why Did Half of the IRM50 Market Leaders Change in a Single Year?
Wheelhouse Advisors has published the 2026 IRM Navigator™ Viewpoint Report, and with it the 2026-2027 IRM50 Market Leaders. Six firms carry the designation: Archer, Diligent, Riskonnect, ServiceNow, PwC, and Accenture. Three of them held the designation last year. Three of last year's leaders, EY, KPMG, and OneTrust, do not appear. In twelve months, half the list turned over.
The Two Executives the Risk Technology Market Serves Least
Twelve executives own different aspects of integrated risk management inside the modern enterprise, from the board and the CEO down through the CISO, the CFO, and the chief compliance officer, and today's risks move too fast and cut across too many of those aspects for any one of them to work alone. The newly published 2026 IRM Navigator™ Leadership Persona Guide from Wheelhouse Advisors maps which of sixteen IRM50 vendors actually serve each of those twelve, on evidence rather than marketing. Two seats come back nearly empty. The Chief Legal Officer holds a single Primary-fit vendor across the entire field, with the widest Not Served band of any persona. The Chief Human Resources Officer holds none at all.
RiskTech Buyer Trap - When “Next Gen SaaS” Signals Foundation Rebuild, Not Integration Maturity
The GRC and broader RiskTech platform landscape is in a visible transition cycle. Several large vendors are rebranding portfolios, introducing AI capabilities, and emphasizing SaaS-first delivery and modern user experiences. Buyers often interpret these moves as a direct signal of near-term integration maturity, faster operational embedding, and “out of the box” IRM outcomes.
That interpretation can be costly.
The more reliable buyer lens is to recognize that platform modernization usually follows a sequenced transformation path, and integration maturity tends to become repeatable only after the new baseline stabilizes across SaaS delivery, experience, and extensibility.