The main goal of the project was to transfer the internal GRC (Governance, Risk Management, and Compliance) operations of two major European clients (NDA) from the banking and energy sectors to Metricstream, a specialized platform designed for comprehensive integration in the fields of governance, risk management, and compliance. Our duties went beyond just adapting and enhancing the platform; we also played a crucial role in analyzing the clients' processes and providing consultation. This approach enabled us to deliver solutions that were specifically tailored to the unique requirements of both clients.
To address organizational, communicational and cognitive challenges, we developed a streamlined approach to deliver required functionality:
To make the delivery as much predictable, stable and transparent as possible, we sticked to conceptual and disciplined approach to plan the delivery. Constantly maintaining and evolving all of the planning artifacts (like Gantt charts) helped a lot to deliver in time and without a stress.
We applied many years of expertise in software areas such as architecture, design, development (both front-end and back-end), database management and DevOps to tackle all the technical challenges arose during the project.
GRC is an integrated approach to managing an organization's governance, risk management, and compliance activities, and it requires a deep understanding of the organization's business processes and workflows.
Simply put, there were two “realms”: business processes of the client and best-practices and capabilities of Metricstream platform. We had to create conditions under which those two “realms” can meet each other in the most efficient manner.
The project encountered several technical challenges as Metricstream's platform is a sophisticated software solution with enterprise-grade functionalities, including a federated GRC data model, reporting and analytics, and multi-dimensional organizational structure, all integrated in a multi-database and distributed architecture.
All the changes made to the platform should be done in planned, shared and collaborative style in a geo-distributed multi-cultural team with members from Germany, India, Czech republic and Romania.