Chartis: SAS a leader in integrated governance, resilience and compliance

Strength across operational risk analytics supports banks and financial services firms

CARY, N.C., Oct. 12, 2026 /PRNewswire/ -- Chartis Research has named SAS a Category Leader for Operational Risk Analytics in its report on integrated governance, resilience and compliance (iGRC) solutions.

The report cited the combined capabilities of SAS^® Governance and Compliance Manager (GCM) and the SAS Viya^® platform and SAS' best-in-class, analytically consistent and governed coverage across multiple risk domains.

This recognition comes as iGRC transcends traditional compliance and reporting to serve a more strategic role in business decision-making. As operational, regulatory, cybersecurity and technology risks become increasingly interconnected, financial institutions need integrated risk intelligence that allows them to act quickly and decisively without sacrificing oversight and control.

"SAS Governance and Compliance Manager treats operational risk as a data and analytics challenge, not simply a workflow, documentation or reporting exercise," said Michael Versace, Research Director at Chartis. "This gives risk leaders the context needed to identify emerging exposure, understand control effectiveness and direct action toward the areas of greatest potential loss."

SAS Governance and Compliance Manager helps organizations identify, assess, monitor and manage risk while creating a unified view of risk exposure across the enterprise. Built on the cloud-native SAS Viya platform, it brings risk, control, compliance, audit and issue-management data together in a governed environment, applying AI and advanced analytics to uncover emerging threats and deliver timely, decision-ready insights.

Per Chartis, "SAS' ability to bridge the gap between operational and technical risk intelligence and executive decision-making is a distinct competitive advantage."

"Organizations often regard governance as a handbrake on innovation, but evidence indicates just the opposite," said Stu Bradley, Senior Vice President of Risk, Fraud and Compliance Solutions at SAS. "Our latest AI study shows that banks with comprehensive governance programs are 6.6x more likely to report strong AI ROI. Robust governance gives institutions the confidence to innovate faster, with a clearer, more integrated view of intersecting risks. That's the foundation SAS delivers."

From risk data to risk intelligence
In its analysis, Chartis spotlighted the strength of the SAS risk management platform in seven key areas, rating SAS' capabilities as best-in-class or leading for:

• Risk Coverage. SAS GCM works across diverse risk domains – operational, credit, market, liquidity, fraud, financial crime, model risk and more – helping organizations connect and govern risk signals that are often managed in silos.
• Mapping and Transformation. GCM maps risk data into a common risk taxonomy for more reliable analytics, faster reporting and stronger audit and regulatory defensibility.
• Data Management. A foundational feature of GCM, this ensures that risk, compliance and audit decisions are as reliable as the underlying data. GCM leverages the data management capabilities of the Viya platform.
• Analytics Tools. SAS turns fragmented risk, control, incident and audit data into intelligence for continuous operational risk monitoring, earlier intervention and more informed decisions.
• Workflows. SAS integrates operational risk analytics, risk indicators, alerting and decision logic into business workflows, helping governance, risk and compliance teams prioritize cases, incidents or remediation actions.
• Architecture. Built on SAS Viya, GCM is a cloud-native, service-oriented evolution of the SAS platform that can process high-volume event data and perform interactive analysis.
• Visualization. GCM is supported by a common repository that gives an enterprise-wide view of internal control performance for risk managers, compliance and audit staff.

Chartis' analysis of SAS and its update to the RiskTech Quadrant for Operational Risk Analytics were included in its report, Integrated Governance, Resilience and Compliance Solutions – Financial Services, 2026: Quadrant Update, published in June 2026.

Industry leadership
SAS has fared well in other Chartis rankings, including recently placing No. 3 overall in the Chartis RiskTech100^®, 2027, the industry's most established and comprehensive annual ranking of the world's foremost risk technology providers. In the RiskTech100, SAS also topped a company record 12 solution awards categories, including ALM Analytics, Balance Sheet Risk Management, Behavioral Modeling, Capital Optimization, Credit Risk and Model Risk Management, among others.

In addition to GCM, SAS risk management solutions include Asset & Liability Management, Credit Risk Management, Enterprise Stress Testing, Expected Credit Loss, Risk Governance and Insurance Risk. Each SAS solution helps banks and financial institutions establish a risk-aware culture, optimize capital and liquidity, and efficiently meet regulatory demands.

About Chartis Research
Chartis Research is an independent research and advisory firm that provides market intelligence, analysis and benchmarking on risk, compliance, governance and financial technology. Its reports and vendor assessments deliver actionable insight to help institutions evaluate solutions, manage risk, and make strategic technology and vendor-selection choices.

About SAS
SAS is a global leader in data and AI. With SAS software and industry-specific solutions, organizations transform data into trusted decisions. SAS gives you THE POWER TO KNOW^®.

SAS and all other SAS Institute Inc. product or service names are registered trademarks or trademarks of SAS Institute Inc. in the USA and other countries. ® indicates USA registration. Other brand and product names are trademarks of their respective companies. Copyright © 2026 SAS Institute Inc. All rights reserved.

Editorial Contact:
Mike Nemecek
[email protected]
919-531-5140

SOURCE SAS