Two thirds of business leaders say integrated risk management is a top priority. Fewer than half have built it. That is the headline of Grant Thornton's 2026 Cyber & Risk Survey of 1,100 senior leaders, published October 13. The first number is the demand, stated by buyers in their own words. The second is how much of it has been met.

The survey landed six days after Wheelhouse Advisors published the 2026-2027 IRM Navigator Vendor Compass for GRC, the first of four reports covering the segments on the IRM Navigator Curve's investment path: GRC, ERM, ORM, and TRM. The Vendor Compass asks the same question from the supply side: how far does the evidence a GRC provider produces travel into enterprise, operational, and technology risk decisions? This edition reads the two documents as a pair. The answer comes first; the evidence follows.