5 out of 5.0, Reviewed Jun 29, 2016
Look for a system solution after an internal process has been established. This is only useful so your process fits the system and not the other way around. Make sure to have an agreed upon taxonomy.
Flexibility in configuration, intuitive to the end user, mitigation plans and control weakness are tracked in the system itself, giving the approvers or end users an opportunity to understand the rationale for control effectiveness rating.
Better off-screen reporting capabilities such as export to Power Point or PDF.
None that comes to the mind.
Simplified organizational structure configuration.
5 out of 5.0, Reviewed Jun 28, 2016
Staying as close as possible to out of the box solutions will expedite the installation of the system in your organization. If customization is required, request the knowledgeable consultation to help translate business requirements to the code development team.
The risk management solutions we have deployed thus far are easy to use by our business users, providing them with real-time information needed to manage the risks inherent in their businesses. The foundational libraries allow us to implement our risk data model which allows various risk disciplines to share data, reducing the burden on the business to provide information to multiple parties.
The vendor can further improve their service by increasing the number of solution managers with deep expertise in the industry and product solutions.
Due to the growth of the vendor, complexity of risk, data and variances in governance processes, I recommend adding knowledgeable business solutions managers with both industry and product knowledge to the vendor's staff in order to provide the level of professional services support needed for successful implementations.
Rather than work with a third party implementation consultant, we would hire an internal contractor of MetricStream to provide on-site consultant support to facilitate the delivery of any customized code. This level of consultation is not considered necessary for delivery of out of the box solutions.
5 out of 5.0, Reviewed Jun 27, 2016
Fully understand where you want to land with your system implementation up front such that you have a good "road-map" to follow.
Enterprise-wide GRC solution which is scalable; new functionality added in each new release.
Initially, the graphics for KRIs was more limited than we preferred; this has since been resolved with the new release of M7 and in the interim MetricStream configured the prior release to our expectations as workaround which has satisfied our expectations. MetricStream is very supportive of configuration to tailor and adds the functionality required.
Overall the vendor has performed well for us. Some of the functionality we recommended which was configured for us is now added to M7 which will save time in implementation for new users of the system. The positive take-away is that MetricStream listens and keeps making the product better in each release.
Overall our implementation has gone well. The next step is for greater enterprise-wide engagement of downstream users of the system. To some degree I would engage users sooner is some areas. The direction we followed was to demonstrate the use case firstly which has been successful for us.
5 out of 5.0, Reviewed Jun 22, 2016
Ensure internal training material is developed and reinforced constantly by user community.
The ability to escalate timing issues and assign accountability. The transparency it provides.
Some modules do not have a bulk upload option for loading historical data.
The experience was a good one. I can't think of anything in particular.
Have more system engineers involved to explain certain functionalities that programmers could not. This was not a hindrance though.
4 out of 5.0, Reviewed Jun 13, 2016
Customized to meet our enterprise goals.
Many aspects, modules to align and deploy for any size or type of enterprise.
PM team and consulting resources are very professional and responsive.
Onboarding and implementation team is excellent. Custom configs are welcome.