IDC MarketScape recognition

PwC named a 2025-2026 leader for Worldwide Cybersecurity Governance, Risk, and Compliance (GRC) Consulting Services

  • Report
  • 4 minute read
  • December 18, 2025

PwC has been recognised as a leader in the IDC MarketScape: Worldwide Cybersecurity Governance, Risk, and Compliance Consulting Services 2025–2026 Vendor Assessment (IDC #US53936925, December 2025)

Real estate

IDC MarketScape:

Worldwide Cybersecurity Governance, Risk, and Compliance Consulting Services 2025–2026 Vendor Assessment

(PDF of 251.79KB)

“We believe that IDC MarketScape's recognition reflects what we see across the market: modern GRC cannot be managed in silos. It must be modernized into a well-governed, connected capability that brings risk, compliance, cyber, and operations together. PwC's approach unifies these functions through integrated processes, shared data, modern tech and AI-enabled insight, helping leaders make faster, more confident decisions and build stronger, more resilient organizations.”

Sean Joyce,Principal, Global Cybersecurity and Privacy Leader, PwC US

Commenting on PwC, the report states that, “Beyond strategic framing, PwC's differentiation lies in its AI-enabled IRM and managed services model, which supports the full life cycle of GRC from strategy to build to run.”

It goes on to say, "PwC's value proposition in cybersecurity GRC is strengthened by its global scale, industry-vertical expertise, and multidisciplinary approach that spans strategic advisory to AI-enabled operational execution. Across sectors such as financial services, insurance, pharma life sciences, healthcare, consumer markets, industrial products, energy, technology, and media and telecom, PwC's teams combine regulatory understanding, cyber-risk insight, and business transformation experience to support governance frameworks, risk quantification, and compliance workflows."

On PwC's strengths, the report states, “A large network manages consistency and local nuance. Programs remain coherent across languages and regulators, which is essential for multinationals.” Additionally, “Siloed functions are integrated under common frameworks that decrease duplicative effort while improving coverage. This reduces the total cost of control.”

“Our network's sustained $1.5 billion investment in AI is already reaping significant rewards for our clients. Everything we do in GRC has a strong focus on AI enablement. Our leading GRC frameworks coupled with agentic solutions for design and delivery of GRC technology offerings are enabling us to serve our clients like never before and our client stories are a testament of our success.”

Salman Ali,Principal, US GRC Tech Leader, Cyber, Data and Tech Risk, PwC US

About IDC MarketScape 

IDC MarketScape vendor assessment model is designed to provide an overview of the competitive fitness of technology and service suppliers in a given market. The research utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each vendor's position within a given market. IDC MarketScape provides a clear framework in which the product and service offerings, capabilities and strategies, and current and future market success factors of technology suppliers can be meaningfully compared. The framework also provides technology buyers with a 360-degree assessment of the strengths and weaknesses of current and prospective vendors. 

Contact us

Rob Donnelly

Rob Donnelly

Global Analyst & Advisor Relations Leader, PwC US

Tel: +1 (917) 471 3355

Follow us