{"schemaVersion":1,"profileUrl":"https://nowen.ai/agents/kpmgsofy-com","markdownUrl":"https://nowen.ai/agents/kpmgsofy-com.md","jsonUrl":"https://nowen.ai/agents/kpmgsofy-com.json","name":"KPMG Sofy GRC","nickname":"Sofy GRC","website":"https://kpmgsofy.com","location":"Amstelveen, The Netherlands","address":{"city":"Amstelveen","country":"The Netherlands"},"industry":"GRC","deliveryModel":"software","status":{"verified":false,"text":"Unclaimed: compiled by Nowen from public sources, not reviewed by the company"},"updatedAt":"2026-10-09T00:58:56.393Z","summary":"An integrated, enterprise-grade governance, risk and compliance platform backed by KPMG that helps organizations digitize compliance, manage risk, and monitor access.","description":"KPMG's GRC platform is a cloud-based governance, risk, and compliance solution designed to help organizations digitize compliance, manage risk, and monitor access. Built on KPMG expertise and methodologies, it provides an integrated, scalable solution for policy and compliance management, risk and control management, continuous control monitoring, and SoD and access control. The platform supports enterprise-wide governance by centralizing obligations, evidence, assessments, and remediation, enabling real-time monitoring, automated workflows, and audit-ready reporting. It serves organizations across industries seeking greater transparency, stronger controls, and proactive assurance, with capabilities that cover regulatory and contractual compliance, risk assessment, incident management, and access governance.","mission":"To help organizations digitize compliance, strengthen risk management, and monitor access through an integrated, scalable GRC platform that enables proactive governance, audit readiness, and trusted decision-making.","directory":{"industryName":"GRC","agentCount":26,"indexable":true,"hubUrl":"https://nowen.ai/industry/grc"},"aiReaderFamilies":["Anthropic"],"products":[{"name":"KPMG Sofy GRC","type":"Platform","url":"https://www.kpmgsofy.com/","summary":"Centralizes governance, risk management, and compliance for enhanced oversight and efficiency.","description":"KPMG Sofy GRC is a cloud-based governance, risk, and compliance platform designed to digitize compliance, manage risk, and monitor access. Built on KPMG expertise, it provides a centralized, scalable GRC platform with ready-to-use content, pre-configured workflows, AI-powered insights, and audit-ready reporting, enabling continuous assurance across the enterprise. Sofy ISMS, a module of GRC, enhances information security governance by providing centralized management of policies, controls, risks, assessments, and evidence, ensuring compliance with ISO 27001 and related frameworks.","pricing":{"text":"Pricing not published"},"features":[{"name":"AI-powered insights","value":"Enhance Compliance With AI","valueDescription":"Leverage AI capabilities to rapidly analyze and summarize compliance obligations and control effectiveness, improving decision-making and resource allocation."},{"name":"Single source of truth","value":"Improve Visibility And Control","valueDescription":"Achieve comprehensive oversight by consolidating all GRC activities within a unified platform, providing critical insights and enhancing decision-making capabilities."},{"name":"Cross-system access monitoring","value":"Reduce Access Risk","valueDescription":"Gain control over SoD conflicts by continuously monitoring user access rights across various systems, ensuring compliance and reducing risk of unauthorized activities."},{"name":"Centralized Governance Across Frameworks","value":"Streamline Governance","valueDescription":"Integrate governance activities in one platform to improve oversight and compliance."},{"name":"Centralized Management of Policies, Controls, Risks, and Evidence","value":"Enhance Traceability","valueDescription":"Maintain clear visibility into control implementation and compliance status across the organization."},{"name":"Single Source of Truth for ISMS","value":"Centralize Data","valueDescription":"Ensure consistent and reliable access to ISMS-related documentation and information."},{"name":"Audit-ready reporting","value":"Simplify Audit Processes","valueDescription":"Utilize comprehensive reporting tools that streamline audit preparations and enhance stakeholder communication, ensuring transparency and accountability."},{"name":"Pre-configured content and workflows","value":"Accelerate Implementation","valueDescription":"Leverage pre-configured options that reduce implementation time and streamline operational processes using established best practices."},{"name":"Continuous Control Monitoring","value":"Prevent Issues Before They Occur","valueDescription":"Shift from periodic reviews to continuous monitoring to proactively address control deficiencies and strengthen compliance management."},{"name":"Integrated risk assessment","value":"Enhance Risk Visibility","valueDescription":"Utilize integrated risk assessments to capture and evaluate various risk factors systematically, enabling more informed decision-making."},{"name":"Real-Time Visibility and Reporting","value":"Monitor Continuously","valueDescription":"Utilize insights to react promptly to security and compliance gaps."},{"name":"Test Once, Comply to Many","value":"Reduce Duplication","valueDescription":"Streamline compliance efforts by leveraging existing work across various standards."},{"name":"Out-of-the-box modules","value":"Quick Setup With Integrated Modules","valueDescription":"Access ready-to-use modules that facilitate swift implementation, addressing various governance and risk management needs immediately."},{"name":"Automated Workflows for Compliance Management","value":"Automate Compliance Tasks","valueDescription":"Decrease administrative workload and improve process accuracy through integrated workflows."}]},{"name":"Policy & Compliance Management","type":"Solution","url":"https://www.kpmgsofy.com/solution/policy-compliance-management/","summary":"Centralizes compliance obligations, enhances visibility, and strengthens execution confidence.","description":"Sofy Policy & Compliance Management helps organizations manage regulatory, contractual, and internal obligations in a structured environment, centralizing them, linking to controls, and tracking evidence and follow-up.","pricing":{"text":"Pricing not published"},"features":[{"name":"Link Obligations to Controls","value":"Demonstrate Implementation","valueDescription":"Showcases how obligations are practically implemented and monitored through relevant controls."},{"name":"Obligations Capture","value":"Centralize Requirements","valueDescription":"Creates a single source of truth for obligations to improve consistency and clarity."},{"name":"Ownership Assignment","value":"Clear Accountability","valueDescription":"Ensures that responsibilities for compliance activities are effectively assigned and managed."},{"name":"Real-Time Compliance Insights","value":"Enable Informed Decisions","valueDescription":"Helps stakeholders make timely decisions by providing instant access to compliance status and gaps."},{"name":"Track Evidence and Follow-Up","value":"Ensure Compliance Readiness","valueDescription":"Maintains robust documentation and tracking to ensure compliance activities are completed and accessible."}]},{"name":"Risk & Control Management","type":"Solution","url":"https://www.kpmgsofy.com/solution/risk-control-management/","summary":"Enhance risk management by linking risks to controls, ensuring holistic governance and compliance.","description":"Sofy Risk & Control Management helps organizations identify, assess, and manage risks, linking risks to controls, incidents, and actions to understand risk exposure and to operate a controlled, risk-aware enterprise.","pricing":{"text":"Pricing not published"},"features":[{"name":"Centralized Risk and Control Management","value":"Consolidate Information Effortlessly","valueDescription":"Provide a single platform to manage all risk and control activities for improved oversight and efficiency."},{"name":"Real-Time Risk Insights","value":"Monitor Risks Continuously","valueDescription":"Receive immediate alerts on risk levels and the effectiveness of current controls for proactive management."},{"name":"Risk Identification and Assessment","value":"Establish a Risk Profile","valueDescription":"Create a complete assessment framework that gives visibility into risk categories and their potential impacts."},{"name":"Integrated Audit Context","value":"Strengthen Governance","valueDescription":"Ensure that each audit is aligned with the organization's risk management strategy, providing comprehensive insights into control effectiveness."},{"name":"Risk-to-Controls Linking","value":"Enhance Control Association","valueDescription":"Ensure that relevant controls are matched with each identified risk to improve response strategies."},{"name":"Continuous Monitoring","value":"Track Controls Automatically","valueDescription":"Utilize automated systems to eliminate manual effort and enhance the accuracy of compliance monitoring."}]},{"name":"Audit Management","type":"Solution","url":"https://www.kpmgsofy.com/solution/audit-management/","summary":"Streamline and enhance your audit process with integrated risk and compliance visibility.","description":"Sofy Audit Management plans, executes, and tracks audits in a structured and scalable way, linking audits directly to risks, controls, compliance activities, and available evidence for full coverage.","pricing":{"text":"Pricing not published"},"features":[{"name":"Audit Lifecycle Planning","value":"Standardize Audit Planning","valueDescription":"Ensure audits are based on comprehensive risk assessments and structured methodologies."},{"name":"Risk and Control Connectivity","value":"Integrate with Risk Management","valueDescription":"Link audit insights directly to business risks and compliance requirements for better decision-making."},{"name":"Testing and Evidence Collection","value":"Centralize Evidence Collection","valueDescription":"Facilitate streamlined evidence documentation and retrieval for audits."},{"name":"Findings and Remediation Tracking","value":"Monitor Remediation Progress","valueDescription":"Enhance accountability and transparency in addressing audit findings through effective tracking."},{"name":"Continuous Assurance Platform","value":"Transition to Continuous Assurance","valueDescription":"Support ongoing compliance and proactive risk management through automation and real-time monitoring."},{"name":"Structured Audit Execution","value":"Standardize Audit Execution","valueDescription":"Ensure consistency and quality in audit procedures through structured frameworks."}]},{"name":"Continuous Control Monitoring","type":"Solution","url":"https://www.kpmgsofy.com/solutions/continuous-monitoring/","summary":"Enhance compliance through real-time visibility and automated control monitoring.","description":"Sofy Continuous Control Monitoring provides ongoing surveillance of controls with analytics, enabling real-time detection of exceptions, automated monitoring, and continuous improvement across the control environment.","pricing":{"text":"Pricing not published"},"features":[{"name":"IT General Controls monitoring","value":"Ensure IT Control Compliance","valueDescription":"Automated assessments of IT configurations across your systems, ensuring that controls are consistently enforced and compliance is maintained."},{"name":"Fraud monitoring","value":"Identify Fraud Risks Early","valueDescription":"Continuously analyze transaction and user activity data to detect unusual behaviors and potential fraud risk, enhancing overall security."},{"name":"Process controls monitoring","value":"Automate Financial Controls","valueDescription":"Embed automated control execution into business processes to enhance continuous assurance and improve control effectiveness."},{"name":"Exception Reporting","value":"Receive Real-Time Alerts","valueDescription":"Instant notifications about exceptions, allowing for faster remediation and maintaining compliance standards."},{"name":"Manual journal entries monitoring","value":"Streamline MJE Reviews","valueDescription":"Continuously monitor manual journal entries to highlight high-risk entries, simplifying the review and approval process."}]},{"name":"SoD & Access Control","type":"Solution","url":"https://www.kpmgsofy.com/solution/sod-access-control/","summary":"Streamline access governance with real-time SoD monitoring and automated user reviews.","description":"Sofy SoD & Access Control centralizes access governance by monitoring cross-system SoD conflicts, performing user access reviews, and enabling continuous risk monitoring across ERP and other applications.","pricing":{"text":"Pricing not published"},"features":[{"name":"Cross-system SoD Monitoring","value":"Monitor SoD Conflicts Across Systems","valueDescription":"Gain visibility into access risks and strengthen security and compliance across interconnected systems."},{"name":"Integrated Access Governance","value":"Centralize Access Governance","valueDescription":"Maintain oversight of user roles and permissions to prevent unauthorized access."},{"name":"SoD Did-Do Analytics","value":"Analyze Executed User Activities","valueDescription":"Determine real exposure to risks by monitoring user activity in relation to access permissions."},{"name":"User Access Reviews","value":"Automate User Access Reviews","valueDescription":"Streamline the review process to identify and remediate excessive or outdated access rights."},{"name":"System Integration Readiness","value":"Seamlessly Integrate with Existing Systems","valueDescription":"Connect existing applications for holistic access monitoring across your organization."}]}],"audiences":[],"segments":[{"name":"Internal audit management","description":"Capabilities to plan, execute, and track internal audits, link audits to risks and controls, collect audit evidence, and manage findings and remediation.","size":1.2,"cagr":8.6,"color":1,"productNames":["Audit Management","KPMG Sofy GRC","Risk & Control Management"],"methodology":"Search results did not provide a single explicit global market-dollar figure. Several sources in the results report CAGR estimates for the internal-audit/audit-management segment (4.8% and 8.6% globally in different reports, and 13.48% for Japan). I used those cited growth rates as the market growth signal and an internal-market-hierarchy estimate (internal audit management as a niche subset of the larger GRC/audit software space) to derive a conservative global market-size estimate of about $1.2B and selected a growth potential of 8.6% (median/representative CAGR from the cited market forecasts).","citations":[{"url":"https://www.linkedin.com/pulse/internal-audit-software-markets-comprehensive-lq5ze","text":"The Internal Audit Software Market ... is expected to grow at a CAGR of 4.8% during the forecasted period (2026 - 2033)."},{"url":"https://www.linkedin.com/pulse/comprehend-audit-management-systems-market-size-growing-psntf","text":"The Audit Management Systems market ... with an anticipated CAGR of 8.6% from 2026 to 2033."},{"url":"https://www.sphericalinsights.com/reports/japan-internal-audit-software-market","text":"The Japan Internal Audit Software Market Size is Expected to Grow at a CAGR of around 13.48% from 2025 to 2035."}]},{"name":"Continuous control monitoring","description":"Real-time surveillance and automated execution of controls with exception reporting, analytics, and continuous assurance to detect control failures and fraud.","size":0.8,"cagr":15,"color":2,"productNames":["Continuous Control Monitoring","KPMG Sofy GRC","Risk & Control Management"],"methodology":"Search results show strong vendor activity, market recognition (Gartner mention) and growing enterprise adoption of continuous controls monitoring but contain no explicit TAM/CAGR figures. I estimated CCM as a nascent niche within the broader GRC/compliance-automation market (small single-digit share of that market) and applied a conservative high-growth SaaS/security-software CAGR to derive a 2026 market size of about $0.8B and ~15% CAGR reflecting rapid adoption and regulatory pressure.","citations":[]},{"name":"Policy management and control automation","description":"Centralized policy drafting, approval, tracking and AI-assisted policy generation combined with configurable controls and automated evidence collection and control mapping to enforce governance.","size":2.1,"cagr":9.48,"color":3,"productNames":["Policy & Compliance Management","KPMG Sofy GRC"],"methodology":"Primary estimate based on IMARC’s policy management software report (USD 2.1B market in 2025 and forecast CAGR ~9.48%). Adjacent automation markets (intelligent process automation and industrial control) show substantially larger market sizes and higher CAGRs, indicating upside if policy management converges with AI/automation platforms; nevertheless the core policy-management segment estimate and baseline growth use IMARC figures.","citations":[{"url":"https://www.imarcgroup.com/policy-management-software-market","text":"The global policy management software market size was valued at USD 2.1 Billion in 2025."},{"url":"https://www.imarcgroup.com/policy-management-software-market","text":"exhibiting a CAGR of 9.48% during 2026-2034."},{"url":"https://www.grandviewresearch.com/industry-analysis/intelligent-process-automation-market","text":"Market Size, 2024 $14.6B; CAGR (2025-2030): 22.6%."},{"url":"https://www.mordorintelligence.com/industry-reports/industrial-control-for-process-automation-market","text":"Market Size (2026) USD 81.89 Billion; Growth Rate (2026 - 2031) 7.15%."}]},{"name":"Integrated risk management","description":"Enterprise risk and compliance capabilities that integrate regulatory change management, vendor risk, governance, and risk assessment to prioritize controls and meet regulatory requirements.","size":12.5,"cagr":12.3,"color":4,"productNames":["Risk & Control Management","KPMG Sofy GRC"],"methodology":"Primary estimate uses an integrated-risk-management specific figure (EchoScope: USD 12.5B in 2024, CAGR 12.3%). Corroborating sources for adjacent risk/digital-risk segments show 2024 values between USD 5.7B–11.8B and CAGRs roughly 11–15%, supporting a ~12% mid‑teens growth view for IRM.","citations":[{"url":"https://www.linkedin.com/pulse/integrated-risk-management-solutions-market-size-growth-shubf","text":"Market size (2024): USD 12.5 billion; CAGR 2026-2033: 12.3%."},{"url":"https://www.kbvresearch.com/risk-management-market/","text":"2022 USD 11.8 Billion; 2030 USD 35.7 Billion; CAGR 15.2%."},{"url":"https://www.credenceresearch.com/report/digital-risk-management-market","text":"Digital Risk Management market size was valued at USD 7213.4 million in 2024; CAGR 13.1% (2024–2032)."},{"url":"https://www.ostendio.com/blog/the-evolving-landscape-of-integrated-risk-management","text":"market valued at $5.6bn and forecasted to grow at a CAGR of 11.4% (from 2020-2025)."},{"url":"https://www.marketsandmarkets.com/Market-Reports/ai-model-risk-management-market-145025445.html","text":"AI Model Risk Management market size 2024: USD 5.7 Billion; CAGR 12.9% (2024–2029)."}]},{"name":"Identity and access governance","description":"Centralized governance of human and non-human identities across SaaS apps, including automated provisioning, role-based access controls, continuous monitoring of permissions, and access remediation.","size":2.46,"cagr":12,"color":5,"productNames":["SoD & Access Control","KPMG Sofy GRC"],"methodology":"Primary estimate uses an IGA-specific market projection (LinkedIn excerpt of a market report) valuing Identity Governance & Administration at USD 2.46B (2025) with ~12% CAGR. Broader adjacent markets (CIAM and overall IAM) show larger bases and double-digit CAGRs (Grand View Research: CIAM $8.1B in 2023, 17.4% CAGR; IAM market projections ~12.8% CAGR), supporting a mid-teens to low-teens sustainable growth outlook for IGA; therefore IGA CAGR estimated at ~12%.","citations":[{"url":"https://www.linkedin.com/pulse/identity-governance-administration-market-size-zyd7e","text":"valued at USD 2.46 Billion in 2025; projected to reach USD 7.65 Billion by 2035; CAGR of 12%"},{"url":"https://www.grandviewresearch.com/industry-analysis/customer-identity-access-management-market-report","text":"Market Size, 2023 $8.1B ... CAGR, 2024–2030 17.4%"},{"url":"https://www.linkedin.com/pulse/identity-access-management-market-industry-growth-xivjf","text":"projected to grow from $22.5B in 2024 to $58.97B by 2033, CAGR 12.8%"}]}],"faq":[],"comparisons":[],"sources":[{"url":"https://kpmgsofy.com","text":"KPMG Sofy GRC"},{"url":"https://www.kpmgsofy.com/","text":"KPMG Sofy GRC"},{"url":"https://www.kpmgsofy.com/solution/policy-compliance-management/","text":"Policy & Compliance Management"},{"url":"https://www.kpmgsofy.com/solution/risk-control-management/","text":"Risk & Control Management"},{"url":"https://www.kpmgsofy.com/solution/audit-management/","text":"Audit Management"},{"url":"https://www.kpmgsofy.com/solutions/continuous-monitoring/","text":"Continuous Control Monitoring"},{"url":"https://www.kpmgsofy.com/solution/sod-access-control/","text":"SoD & Access Control"},{"url":"https://www.linkedin.com/pulse/internal-audit-software-markets-comprehensive-lq5ze","text":"The Internal Audit Software Market ... is expected to grow at a CAGR of 4.8% during the forecasted period (2026 - 2033)."},{"url":"https://www.linkedin.com/pulse/comprehend-audit-management-systems-market-size-growing-psntf","text":"The Audit Management Systems market ... with an anticipated CAGR of 8.6% from 2026 to 2033."},{"url":"https://www.sphericalinsights.com/reports/japan-internal-audit-software-market","text":"The Japan Internal Audit Software Market Size is Expected to Grow at a CAGR of around 13.48% from 2025 to 2035."},{"url":"https://www.imarcgroup.com/policy-management-software-market","text":"The global policy management software market size was valued at USD 2.1 Billion in 2025."},{"url":"https://www.grandviewresearch.com/industry-analysis/intelligent-process-automation-market","text":"Market Size, 2024 $14.6B; CAGR (2025-2030): 22.6%."},{"url":"https://www.mordorintelligence.com/industry-reports/industrial-control-for-process-automation-market","text":"Market Size (2026) USD 81.89 Billion; Growth Rate (2026 - 2031) 7.15%."},{"url":"https://www.linkedin.com/pulse/integrated-risk-management-solutions-market-size-growth-shubf","text":"Market size (2024): USD 12.5 billion; CAGR 2026-2033: 12.3%."},{"url":"https://www.kbvresearch.com/risk-management-market/","text":"2022 USD 11.8 Billion; 2030 USD 35.7 Billion; CAGR 15.2%."},{"url":"https://www.credenceresearch.com/report/digital-risk-management-market","text":"Digital Risk Management market size was valued at USD 7213.4 million in 2024; CAGR 13.1% (2024–2032)."},{"url":"https://www.ostendio.com/blog/the-evolving-landscape-of-integrated-risk-management","text":"market valued at $5.6bn and forecasted to grow at a CAGR of 11.4% (from 2020-2025)."},{"url":"https://www.marketsandmarkets.com/Market-Reports/ai-model-risk-management-market-145025445.html","text":"AI Model Risk Management market size 2024: USD 5.7 Billion; CAGR 12.9% (2024–2029)."},{"url":"https://www.linkedin.com/pulse/identity-governance-administration-market-size-zyd7e","text":"valued at USD 2.46 Billion in 2025; projected to reach USD 7.65 Billion by 2035; CAGR of 12%"},{"url":"https://www.grandviewresearch.com/industry-analysis/customer-identity-access-management-market-report","text":"Market Size, 2023 $8.1B ... CAGR, 2024–2030 17.4%"},{"url":"https://www.linkedin.com/pulse/identity-access-management-market-industry-growth-xivjf","text":"projected to grow from $22.5B in 2024 to $58.97B by 2033, CAGR 12.8%"}]}