All ideas

Risk Assessment - Quantitative factors - Option to add multiple levels in a hierarchical factor Customer wants to create a Hierarchical factor with 2 sub-levels where second level to identify the maximum value of a set of factors and 1st level is ...

AON's Problem Statement: Without a reporting period, auditors, regulators, board members, and other stakeholders wouldn’t know the validity of compliance reports and the risk posed to our information assets, making it difficult to take important d...

Use Case: We use a shared responsibility model where some controls are provided by other parts of the org. Those controls are assessed separately and added to the evidence library for use in assessments of systems consuming the controls. My intent...

Report to view the Common and Sample question responses provided by the Assessors or control owners during the testing

Martktplaats B.V would like to be able to paste evidence into the sample table (in test execution page). This would allow them to fully use MetricStream to handle evidences. Currently, customer does this using the spreadsheet uploads. Other GRC so...

Expedia is looking for an option to disable the owner notifications in Create Library objects from Authority documents form. Currently they are receiving more than 4000 notifications when UCF data is imported into MetricStream.

As per the current Solution, the User can relate the Evidence while performing a control test or self-assessment. AON has requested that Evidence be auto-created in the GRC Library when Evidence is attached ("Attach Evidence" attribute) during a C...

initiator self assessment /test plan should have option of adding methodology at task level. Each task can have unique methodology Product Team: Can you provide more information? What are the methodologies and what should be the behavior for each ...

Users wants the risk Rating for the Inherent Risks/Residual Risks Breakdown by Category Report to be in logical order like : Report to be: Low, Moderate, High, and Very High. Currently, in the MSU system Sorting is applied in alphabetical order. P...

NIST SP 800-30 NIST Cybersecurity Framework is popular among companies in the US. NIST has become the gold standard for assessing cybersecurity maturity, identifying security gaps, and meeting cybersecurity regulations. Using our IT- risk module w...