Core Capabilities 

• Enterprise GRC — connects governance, risk, compliance, controls, issues, and reporting in one framework 

• Risk Management — enterprise risk assessments, operational risk management, risk registers, controls, mitigation plans, and monitoring 

• Compliance Management — regulatory obligations, compliance assessments, controls mapping, evidence, issues, and remediation tracking 

• Policy Management — policy authoring, review, approval, publication, attestation, and lifecycle management 

• Ethics and Whistleblowing — ethics case management, incident intake, investigations, reporting, and whistleblower processes 

• Audit and Controls Assurance — audit planning, engagements, findings, recommendations, action tracking, and assurance reporting 

• Learning and Compliance Training — training administration connected to risks, policies, and compliance requirements 

• Third-Party and IT Risk — assessment and monitoring of suppliers, technology providers, information risks, and related controls 
  
  

Underpinned By 

• A cloud-based platform with connected modules and workflows 

• API-led and workflow-based integration with enterprise applications and automation platform