All ideas

JIT feature has been used by many clients to provision their larger 1LOD or Business users who are not needed on Day 1 of the rollout but do not want to spend administrative time to provision 1000s of users. This feature allows auto user creation ...

The request here is to leverage the "Test Execution" report which must display the control results along with its related objects that are mapped within the GRC library. This mean that if 'Test Item' is selected as "Control" specifically, it shoul...

From Assessment Summary section in Risk Assessment task, Control Effectiveness section should display the guidance details of Control factors similar to the inherent factor rating details. Please add Control factors details to show autopopulated g...

Many of the customers are required to make changes to completed Risk Assessments based on the facts that are identified and needs to updated instead of creating new Risk Assessment and perform it from scratch.

Verizon team indicated that the error messages in the upload template are not user friendly. Unless there is a trianing and documented the error messages, it's not easy to perform data uploads. Ex: Unable to run the infolet or the value entered is...

Hi Team, Our customer 'Kroger' has requested that the "Applicability" checkbox be left empty by default and that the assessments' ratings be left blank. The user should be able to easily select the factors that are required to have ratings rather ...

Heat maps do not reflect all risks and will only display the risks shown on the page of the screen.

Risk Assessments can only be completed by one individual due to the roll-up capability of risk assessments. This has limited the capability to let users use the systems efficiently.

Hi Team, We have a partner who is implementing Cyber-IT for BMC(customer), below is what they have asked to start with:- "Requirement is to ensure once a threat is created in MetricStream platform then the information is pushed to BMC Remedy and t...

AON's Problem Statement: Without a reporting period, auditors, regulators, board members, and other stakeholders wouldn’t know the validity of compliance reports and the risk posed to our information assets, making it difficult to take important d...