"The solution enables the bank to report top risk instances, thus informing the management and board about the organization’s exposure to critical risks, while reconciling high level statements with granular control outcomes in each process and country."

“MetricStream had provided a comprehensive yet simple to use solution. And simplicity was important as we did not want something overly technical and complicated.”

"The auditor is like a critical friend and an evangelist within the organization who takes everyone along on the GRC journey."

“Quality of service and a commitment to continuous improvement distinguish our organization in the marketplace. Critical initiatives, such as the MetricStream implementation, enhance the organization’s ability to anticipate and respond to the constantly changing environment in which we operate. Enhancing our quality management system with the MetricStream platform has improved …

“GRC initiative requires building a roadmap for audit, risk and compliance to increase business performance.”

"Reliability compliance is a critical program for us. We must report on over a thousand standards and requirements for the large number of participants in our energy market. By using MetricStream solutions we will be able to enhance our compliance efforts. We selected MetricStream solutions because they were user friendly …

"We have started to aggregate risk data across the various risk taxonomies and risk types i.e. if an individual of our company or a client is showing up in more than 1 risk silo, it probably warrants an in depth review. This is obviously a much more complex system but …

"The MetricStream M7 platform which we rolled out earlier this year is really going to help us improve efficiency and help us streamline our data model."

"Dealing with risks is a part of everyone's day to day job. All of our employees at Salesforce are Risk Rangers and it takes all of us playing our part to effectively manage the risks that we face."

"Through the common controls framework we were able to accomplish a significant amount of consolidation about 93% of consolidation. We were able to reduce the 5128 requirements into a small set of about 326 controls."

"Now we have our workflow process in place to identify the audit universe, to assess and document what should be the priorities for next year, to set up the plan. All that happened in the past through emails."

"With a deluge of threats targeting internet infrastructures, achieving regulatory compliance was critical to us. We were looking for a solution that could serve as the basis of our SOX compliance initiatives and provide a comprehensive platform to manage financial and nonfinancial controls."

“A lot of time may be spent on the design phase of a GRC program, but ultimately, it's about how the program is implemented. There needs to be a focus on engagement, communication, follow-up, and the sustainability of the GRC program.”

"In terms of benefits of implementation, we've achieved everything we set out to. We have a single source of the truth. The GRC platform is seen by the CRO as the place where all of the risk and control data and loss event data in Nationwide is mastered. It is …

"Our goal was to simplify the deployment of common approaches enabling us to focus on continuous improvement of our products and critical processes across the entire supply chain. MetricStream's Enterprise Compliance Platform and its comprehensive suite of applications will offer us the enterprise-wide standardization capability that localized point applications do …