"Earlier people used to work with risk, and did not know about it. But now people are more aware that they are working with risk and they focus on the right thing and the main thing."
“The Energy & Utilities space where we operate is likely to present more complex regulatory and risk management challenges. With MetricStream, we have the capabilities to automate and streamline our entire GRC approach, assuring compliance with regulatory and reliability requirements and enabling a sustainable and proactive risk management approach, MetricStream solution has helped us closely align GRC with corporate strategy and optimize productivity by eliminating redundant activities and costly manual processes.”
"Layering in technology such as MetricStream allowed us to have transparency of information, all in one place and across all of our offices and practices."
"Our goal was to simplify the deployment of common approaches enabling us to focus on continuous improvement of our products and critical processes across the entire supply chain. MetricStream's Enterprise Compliance Platform and its comprehensive suite of applications will offer us the enterprise-wide standardization capability that localized point applications do not provide."
"Now we have our workflow process in place to identify the audit universe, to assess and document what should be the priorities for next year, to set up the plan. All that happened in the past through emails."
"Technology is an integral part of any GRC strategy, and it should be factored into the overall corporate strategy, as most organizations are no longer location-centric but information-centric."
"We were looking to upgrade our GRC system without compromising on our GRC vision and processes. MetricStream's flexible solutions offered us that freedom along with the benefits of a tightly integrated GRC framework. Each of MetricStream's modules demonstrated comprehensive, cutting-edge capabilities that were a perfect fit to our requirements. We now look forward to managing the complete spectrum of GRC programs from a common platform."
"Technology is a key enabler. Without data that is accurate, timely, and meaningful, we are blind to our risks. Leveraging technology like MetricStream helps us gather the data that we need to make informed decisions.”
"One of the highlights of our GRC implementation is the successful use of the survey module as a global first level assurance activity. In the last 6 months alone, we've completed close to 10,000 first line assurance verification. This is supporting our control testing and eventually helping us to demonstrate the effectiveness of our controls."
"We are happy to say our compliance to incident reporting and tracking in the new software is now at 96%, previously in the first edition, it was 4%. Our action tracking today is at 89% and previously it was I think 17%."
"We are operating on one single system which gives us the ability to act prior to any incident. {This also gives us the} ability through our assurance activity to demonstrate we have a high degree of operational discipline across all areas of our business."
“We tested MetricStream, and found that it addressed all our needs, in terms of unifying the audit universe, improving the effectiveness of internal audit function, and streamlining the internal control and governance processes.”
"With the MetricStream solution, the bank can effectively aggregate and monitor compliance risks at the enterprise level."
“Its called GRC Journey for a reason. Cultural change and education within the organization take time.”
“By October 2011, we had a complete, consolidated picture of risk across the group. Therefore, during our meetings with organizational executives, we could point out which auditable entity was more risky than others. Providing this kind of feedback was new. It enabled us to add value to the management team, and act as partners to the business.”