What can you manage with iGRCs?
Risks and threats
Record internal and external risks, assess likelihood and impact, establish risk appetite and retain the reasoning behind assessments.
Controls and recovery measures
Document safeguards and recovery arrangements. Link them to risks and use assessments and evidence to review their effectiveness.
Actions and remediation
Assign tasks and corrective actions, record ownership and track outstanding work using relevant alerts and reminders.
Incidents and breaches
Capture events, record their impact and response, and connect the lessons to affected risks and controls.
Assessments and checklists
Configure questions and review criteria for risk, compliance, controls and operational processes. Use responses and supporting evidence to identify gaps.
Metrics and indicators
Maintain key risk, performance and control indicators, with relevant thresholds to support oversight.
Data requests
Capture and manage requests for personal data from individuals.
Assets and third parties
Maintain asset and vendor registers. Use assessments to review supplier risk, performance and other criteria relevant to your organisation.
Obligations
record and maintain all legal and industry obligations, external agreements as well as internal obligations that need to be assessed and evidenced.
Evidence
collect evidence that demonstrates on-going compliance with obligations as well the frequency of collection and allocation of responsibility.
Training and certification
track key certification and training needs for staff to support their development and business obligations and policies.
Documents and governance activities
Keep documents or links to source material with the records they support. Use calendars and scheduled activities to help organise recurring work.
Frequently asked questions
Are all capabilities required from the start?
No. Begin with the records and workflows that address the most pressing need and discuss how to introduce further capabilities.
Can our assessments use our own questions?
Yes. Configurable assessments and checklists support questions and criteria suited to the work being reviewed.
Can we keep documents in another system?
You can upload supporting documents or link to their source URLs. Discuss access and document arrangements during configuration.
See the relevant capabilities together
Tell us your priority use case and we will demonstrate the combination of registers, assessments, evidence and actions that supports it.