"The solution enables the bank to report top risk instances, thus informing the management and board about the organization’s exposure to critical risks, while reconciling high level statements with granular control outcomes in each process and country."

“MetricStream had provided a comprehensive yet simple to use solution. And simplicity was important as we did not want something overly technical and complicated.”

"The auditor is like a critical friend and an evangelist within the organization who takes everyone along on the GRC journey."

“Prior to moving to MetricStream, it generally took 1-2 weeks to get the management report ready. By streamlining the process in Metricstream, utilizing inherent workflow around approvals and rejections, and modifying our existing landing page to incorporate that particular report directly for our issue users, we have reduced the timeframe …

"Organizations need to be more nimble and quick with how they use risk information. We need to break down the siloes, become more transparent, link things together, so that everyone understands what’s happening. The value of technology comes from the efficiency it brings, as well as the costs and time …

"Today, we have a centralized GRC system across SLC sharing common information and a common language through a Single Version of the Truth with over 3,000 users of the system."

"What drove us to go down the MetricStream route. We had 3 main drivers for change. The first of those was efficiency. The manual system was effective but it was very labor intensive, it was time consuming. There was a lot of people involved in moving a lot of paper …

"Leveraging MetricStream technology will help us improve efficiencies and performance by enabling enhanced collaboration, streamlining information gathering, and creating clear visibility into our internal audit program."

"Quantification is important because it gives us a base line or a basis rather of how we can truly inform the business to help prioritize business decisions but also to enable business."

“MetricStream’s solution has helped us streamline elaborate and intricate processes of compliance and risk management with an integrated enterprise-wide system, giving us a better grip on our compliance, risks, and lowering the overall cost of compliance.”

“Enterprise Risk Office at PSCU leverages technology to ‘connect the dots’ across the organization and stay abreast of regulatory changes.”

“MetricStream provided us with state-of-the-art enterprise-wide loss management tool that captured losses, and provided a remediation structure for reassessing risks and controls, compliance policy reviews, and business process changes. We are particularly pleased with the transparency of records, and the solution’s ability to determine uptothe-minute status of all issues and …

"[GRC] is truly a strategic implementation. [By using a GRC tool], you can save a lot of time, streamline your processes, and get people across the organization to use the same tool, thus increasing transparency and accountability.”

"We've reduced remediation time and action planning, reduced open risks and compliance issues. {Prior to MetricStream} Sometimes things were left open for half a year till we found them again. Single source of truth rationalizes all the activities or the controls or the risks and provides a consolidated view of …

"Simplicity was the second word we decided to use while designing the program."