As the security industry matures from managing user id's, firewalls, routers, and servers a capability to track and ensure value provided by security process is in high demand.  Governance, Risk, and Complinace (GRC) is a term coined but vendors to gain a market share in this space.  Some of the players are:

• Paisley
• Open Pages
• Agiliance
• Risk Resolver
• Citicus One
• Archer
• McAfee Risk and Compliance Manager
• Symantec control Compliance

Amongst the above tools corporations should be looking that these tools deliver following capabilities:

• Risk Assessment
• Control Management
• Evidence Generation