Asking 'how do we compare to our peers' assumes an answerable question: that a defined, known peer group exists and that data about it is available. In practice, most organizations reach for whichever benchmark is easiest to obtain and quietly relabel its sample as 'our peers,' whether or not the label is accurate.The Convenient Peer Group ProblemA benchmark vendor's customer base, a conference's attendee survey, or a consultancy's client sample are each a real population — just not necessarily yours. An organization comparing itself against 'peers' who are, on inspection, simply whoever happened to answer a particular survey is comparing itself against a group it did not choose and cannot verify.Building a Peer Group Worth TrustingDefine the peer group before looking for data about it: similar regulatory exposure, similar scale, similar architecture — decided independently of which benchmark happens to be available.Be explicit when no good data exists: 'we do not have a trustworthy peer comparison for this' is a more honest governance statement than presenting a mismatched one with confidence.Weight qualitative peer input alongside quantitative benchmarks: a handful of direct conversations with genuinely comparable organizations can be more reliable than a large sample of loosely comparable ones.Revisit the peer group as the organization changes: a peer set that was accurate three years ago may not be after a merger, a new market, or a change in regulatory scope.“The question is not whether you have a benchmark. It is whether the group behind it would recognise themselves as your peers.”When 'No Comparison' Is the Right AnswerNot every governance question needs an external comparison to be answered well. Where no trustworthy peer group exists, the more defensible position is often to make the case on the organization's own risk and exposure, and say plainly that no comparable external benchmark was available — rather than reach for the nearest approximate one and imply more confidence than the data supports.Share this articleX (Twitter)LinkedInFacebookCopy Link
Benchmark StudyAug 16, 2026Why Cross-Industry Benchmarks Rarely Transfer to Your OrganizationA benchmark built from a mixed sample of industries tells you what an average organization does. It rarely tells you what your organization, with your specific risk profile, should do.
Research ReportAug 30, 2026What 'GRC Maturity' Actually Means Before You Benchmark Against ItEvery maturity model produces a number. Very few of them agree on what the number is supposed to represent, which makes comparing your score to anyone else's a riskier exercise than it looks.
Research ReportJun 19, 2026The Difference Between a Report and a DecisionA well-produced report can sit on a governance committee's agenda for months, cited approvingly, without ever changing what the organization actually does. That is not the report's failure. It is what happens when reading one is mistaken for acting on it.
