Governance, risk and compliance in BPM

Governance, risk and compliance (GRC) are current research topics in business process management (BPM). However, the state of the art in research and practice does not match. In this work, we investigate the practice of GRC in BPM tools based on a survey of 14 software providers. Identifying commonly shared features and components we determine the state of the art of GRC support in BPM tools. We found software providers agree in their definitions of GRC. Today's tools provide mature solutions for GRC, displaying a common base of features. This provides a basis for further research in the area of GRC.