"We've reduced remediation time and action planning, reduced open risks and compliance issues. {Prior to MetricStream} Sometimes things were left open for half a year till we found them again. Single source of truth rationalizes all the activities or the controls or the risks and provides a consolidated view of risks for the board."
"Among other benefits, the Metricstream solution offers us a centralized repository of policies and procedures, and a powerful user-friendly search tool to locate them. It also contains a comprehensive framework to map policies to areas of compliance, control, processes, and other policies for efficiency."
"Excellent risk management, supporting governance, and no small amount of capability really supported informed business decision making driven by risk."
"The subject of GRC is very new, but all industries are discussing it. GRC will become one of the most important subjects in the next decade."
“We have engaged [on the MetricStream Community] throughout the implementation and found the interactions and materials quite useful. [Through the interactions on the MetricStream Community] we have also made sure that what we are working through, other companies are also working through, and what we are seeing, other companies are seeing; so it's reassuring from that perspective.”
"Our approvals are consistently done within the system, we have issue management beyond the audit cycle, our quarterly and annual reporting execution time has been reduced significantly. QA efforts have been redirected to higher value work due to workflow and system checks."
“We tested MetricStream, and found that it addressed all our needs, in terms of unifying the audit universe, improving the effectiveness of internal audit function, and streamlining the internal control and governance processes.”
"We continue to be impressed with the richness of MetricStream's SOX solution and their ability to help deploy the solution in such a short timeframe."
"We look at enterprise GRC, its not you know a technology but it is an enabler that allows us to move ahead."
"Technology is an enabler, it helps in establishing consistent practices and standards amongst all our risk disciplines."
"Today, we have a centralized GRC system across SLC sharing common information and a common language through a Single Version of the Truth with over 3,000 users of the system."
“Its called GRC Journey for a reason. Cultural change and education within the organization take time.”
"After deploying the MetricStream platform with Enterprise Risk, Business Continuity. Policy, Compliance and Issue Management, the company now has a visibility into risk and much stronger business resilience. We now use a common language and taxonomy with common definitions."
“With MetricStream, we’re now better at prioritizing our risks and making them consistent when we assess them. This has helped us improve our risk mitigation capabilities and even use risk appetite to make sure that we’re consistently escalating risk to the appropriate level. That was probably not a strong point about a year ago.”
“MetricStream’s solution has helped us reinforce our compliance initiatives as well as restructure our audit programs. The risk transparency and amalgamation of enterprise-wide processes has contributed to our objective of total compliance and has eliminated all flaws in audit and issue management initiatives.”