The state of governance, risk and compliance: ICA's 2025 global GRC survey

ICA surveyed 383 GRC practitioners across 87 countries and 30+ sectors to understand how the profession is responding to rising compliance costs, the adoption of AI, a shifting deregulatory climate, and the skills needed for the next five years.

This page summarises the full dataset; each section below explores one theme in depth, with the complete underlying data tables.

Key Statistics

  • Only 9.6% of firms allocate more than 10% of their budget to GRC, and 41.8% don't know their firm's allocation at all.
  • Just 1.6% of firms have ‘fully integrated’ AI into GRC processes; 32% haven't adopted AI for GRC purposes at all.
  • 48.4% report that global deregulation moves have had ‘no impact at all’ on their firm to date.
  • 28.8% rank relationship management as the single most important skill for future GRC professionals.
  • 51.3% rank ‘advancements in AI and technology’ as the biggest driver of GRC change over the next five years.

Source: ICA Global GRC Survey 2025. Survey of 383 practitioners across 87 countries and 30+ sectors.

Methodology

Metric Value
Respondents 383
Countries represented 87
Sectors represented 30+
Banking / financial services respondents ~44% combined (25% banking, 19% broader financial services)
Seniority: senior manager / director level 44%
Survey topics covered Cost of compliance; AI and associated risks; impact of deregulation; the future of GRC

Section index