“We are happy to say our compliance to incident reporting and tracking in the new software is now at 96%, previously in the first edition, it was 4%. Our action tracking today is at 89% and previously it was I think 17%.”
“For the first time the company had a complete inventory of the organization’s risk. That helped us recognize early on that MetricStream solution is well conceived and tremendously efficient.”
"With all risk and loss information in one place, the three lines of defense can collaboratively create risk mitigation plans and actions, thereby accelerating their response to loss events or incidents."
"After deploying the MetricStream platform with Enterprise Risk, Business Continuity. Policy, Compliance and Issue Management, the company now has a visibility into risk and much stronger business resilience. We now use a common language and taxonomy with common definitions."
“With MetricStream, we’re now better at prioritizing our risks and making them consistent when we assess them. This has helped us improve our risk mitigation capabilities and even use risk appetite to make sure that we’re consistently escalating risk to the appropriate level. That was probably not a strong point about a year ago.”
“We continue to be impressed with the richness of MetricStream’s SOX solution and their ability to help deploy the solution in such a short timeframe. It speaks volumes about the configurability and richness of their solution.”
"Our first line is no longer coming to us to fill requests on an ad hoc basis. We are not having to drop everything to pull reports out of MetricStream for them. They can go straight into the Tableau server, pull the report they need and they are good to go."
"Technology is an enabler, it helps in establishing consistent practices and standards amongst all our risk disciplines."
"There has been increased public pressure to improve governance and improve regulation -- even the regulators are being regulated."
"The benefits of using MetricStream are that everything is in one system; everything has a single taxonomy. We have combined all our risk definitions in one central occasion, so that it’s easy to report on and people know what a high-risk issue is."
“For GRC, we are looking to have a vision of how all these different spare pieces can come together and how we can tell the whole story."
“We tested MetricStream, and found that it addressed all our needs, in terms of unifying the audit universe, improving the effectiveness of internal audit function, and streamlining the internal control and governance processes.”
“With MetricStream Solution, we achieve superior compliance with the multitude of standards that we are required to follow most stringently, NERC being the most prominent one among these. With advanced functionalities and robust architecture, MetricStream’s platform is capable of completely supporting our complex NERC compliance frameworks, documentation workflows, and steep reporting demands.”
"At INC Research, we hold ourselves to the highest standards of quality, MetricStream’s solutions will be an important part of sustaining those standards of quality as we grow and expand. We selected MetricStream based on the company’s rich domain knowledge of the Life Sciences industry which enabled them to support a large, growing organization such as ours."
"The solution enables the bank to report top risk instances, thus informing the management and board about the organization’s exposure to critical risks, while reconciling high level statements with granular control outcomes in each process and country."