Many compliance professionals continue to rely on old-fashioned spreadsheets to track data. That could be a problem, says David Houlihan, principal analyst for Blue Hill Research, a technology research firm.

Spreadsheets may be cheap and ubiquitous, compared to other GRC solutions, but those benefits can mask risks and inefficiencies. And, making the pitch for a centralized technology solution brings with it the difficult task of justifying the move away from what is, essentially, a free tool.