"We've reduced remediation time and action planning, reduced open risks and compliance issues. {Prior to MetricStream} Sometimes things were left open for half a year till we found them again. Single source of truth rationalizes all the activities or the controls or the risks and provides a consolidated view of …

"Earlier people used to work with risk, and did not know about it. But now people are more aware that they are working with risk and they focus on the right thing and the main thing."

"[GRC] is truly a strategic implementation. [By using a GRC tool], you can save a lot of time, streamline your processes, and get people across the organization to use the same tool, thus increasing transparency and accountability.”

"When we have our process risk controls and taxonomies and organization all inside MetricStream, when audit goes to audit now, that data will be there. So immediately your auditor will  be happier because they don't have to spend 20 30 40 hours building RCM and checking and all that stuff. …

"Today we have implemented about 6 modules in production. We started off with Case, PDMS, we went with Issue Management enterprise wide. We have about 2000 users."

“MetricStream solutions will streamline our financial controls processes for SOX compliance as well as enable us to employ best practices frameworks for managing compliance with FERC and NERC.”

“One of our biggest risks is responsible gaming risks. GRC technology can help us a lot in tracking this risk instantly, and taking measures to mitigate it."

“We continue to be impressed with the richness of MetricStream’s SOX solution and their ability to help deploy the solution in such a short timeframe. It speaks volumes about the configurability and richness of their solution.”

"The auditor is like a critical friend and an evangelist within the organization who takes everyone along on the GRC journey."

"Simplicity was the second word we decided to use while designing the program."

"Technology is a key enabler. Without data that is accurate, timely, and meaningful, we are blind to our risks. Leveraging technology like MetricStream helps us gather the data that we need to make informed decisions.”

"One of the highlights of our GRC implementation is the successful use of the survey module as a global first level assurance activity. In the last 6 months alone, we've completed close to 10,000 first line assurance verification. This is supporting our control testing and eventually helping us to demonstrate …

"We are happy to say our compliance to incident reporting and tracking in the new software is now at 96%, previously in the first edition, it was 4%. Our  action tracking today is at 89% and previously it was I think 17%."

"We are operating on one single system which gives us the ability to act prior to any incident. {This also gives us the} ability through our assurance activity to demonstrate we have a high degree of operational discipline across all areas of our business."

"Manal Al Sarraf, Head of Internal Audit, Batelco, describes the Governance, Risk and Compliance (GRC) challenges that the telecom industry currently faces and what they need to do as a company in order to overcome them. She also talks about the benefits she’s getting by being a part of the …