Guidewire

Best in Class Enterprise IT GRC Management: Medium Enterprise

When organizations approach IT GRC in scattered silos of documents and disconnected solutions and processes, it is impossible to be intelligent about IT GRC decisions that impact the broader organizations and their operations. Organizations need an integrated IT GRC architecture that delivers 360º contextual intelligence on IT security, risk, and compliance. It provides an integrated foundation to expand and build enterprise GRC capabilities across departments.

Guidewire is a San Mateo, CA-based technology solutions provider to the property, casualty, and workers compensation insurance industry. It combines digital, core, analytics, and machine learning to deliver its platform as a cloud service. Over 500 insurers in 38 countries use Guidewire’s cloud and implementation services.

The GRC/IT risk team’s mission and challenge was to create true risk management processes that were aligned with business needs and stakeholder value. While they had the foundation of a basic GRC program, it was fundamentally siloed and relied heavily on manual processes, creating redundancy and inefficiency for Guidewire’s delivery organizations. Additionally, there was no true risk management program. However, there was an issues management process that did not differentiate risks from issues. The two were considered synonymous.

Have a question about MetricStream or other solutions for IT GRC Management available in the market?