"With the MetricStream solution, Cleveland Clinic has been able to efficiently identify and assess IT risks, while also evaluating IT compliance and controls, monitoring third-party risks, and remediate information security threats."

“This enterprise-class system is one of several tools that will enable us to further streamline and integrate our customer quality processes across various organizations and provide us the foundation to take our customer quality metrics to the next level.”

"The benefits that organizations can gain from implementing a GRC tool are streamlined operations, elimination of duplication of work and information, and contextual intelligence that allow you to make better decisions faster."

"Second and third line of defense are finally speaking with each other, exchanging information. We have broken the silos that we had grown into. We have extended the program to the local banks and they have received it quite happily."

"When we have our process risk controls and taxonomies and organization all inside MetricStream, when audit goes to audit now, that data will be there. So immediately your auditor will  be happier because they don't have to spend 20 30 40 hours building RCM and checking and all that stuff. …

"Today we have implemented about 6 modules in production. We started off with Case, PDMS, we went with Issue Management enterprise wide. We have about 2000 users."

“By October 2011, we had a complete, consolidated picture of risk across the group. Therefore, during our meetings with organizational executives, we could point out which auditable entity was more risky than others. Providing this kind of feedback was new. It enabled us to add value to the management team, …

"Earlier people used to work with risk, and did not know about it. But now people are more aware that they are working with risk and they focus on the right thing and the main thing."

"The subject of GRC is very new, but all industries are discussing it. GRC will become one of the most important subjects in the next decade."

"The solution enables the bank to report top risk instances, thus informing the management and board about the organization’s exposure to critical risks, while reconciling high level statements with granular control outcomes in each process and country."

"One of our biggest risks is responsible gaming risks. GRC technology can help us a lot in tracking this risk instantly, and taking measures to mitigate it."

“MetricStream’s solution has helped us streamline elaborate and intricate processes of compliance and risk management with an integrated enterprise-wide system, giving us a better grip on our compliance, risks, and lowering the overall cost of compliance.”

“For the first time the company had a complete inventory of the organization’s risk. That helped us recognize early on that MetricStream solution is well conceived and tremendously efficient.”

"We've reduced remediation time and action planning, reduced open risks and compliance issues. {Prior to MetricStream} Sometimes things were left open for half a year till we found them again. Single source of truth rationalizes all the activities or the controls or the risks and provides a consolidated view of …

"Simplicity was the second word we decided to use while designing the program."