I just had a chance to take a look at some recent research put out by Gartner on the IT Governance, Risk & Compliance Management space (IT-GRC).
They do an artful job laying out the customer desired capabilities and scoping the size of the market opportunity.
A couple key points to soak in:
I highly recommend heading up to Gartner's website and reading each report;

They do an artful job laying out the customer desired capabilities and scoping the size of the market opportunity.
A couple key points to soak in:
- IT GRCM products provide functions that address needs expressed by 75% of the Gartner client base.
- Gartner estimates that software license revenue for vendors...was $73million for 2007, and we project a growth rate of 70% for 2008.
- 2008 - The Year of IT Risk Management
- 2008 - The Year of IT Risk Management, Part 2 - Rise of IT GRC
- 2008 - The Year of IT Risk Management, Part 3 - More and more GRC oriented predictions
I highly recommend heading up to Gartner's website and reading each report;
- MarketScope for IT Governance, Risk and Compliance Management, 2008
- Critical Capabilities for IT GRCM Tools





