CUES Member Community

Expand all | Collapse all

GRC Platforms

  • 1.  GRC Platforms

    Posted Dec 14, 2020 06:50 PM
    What Governance, Risk and Compliance platforms do you use, and how would you rate it for:
    1) Comprehensiveness (covering governance (policies, etc.), risk management (assessments, etc), compliance, internal audit, information security, vendor management, reporting, etc.)
    2) Ease of use
    3) Vendor support and/or integrator support

    Thank you for any insights!
    --Kevin Landel

    ------------------------------
    Kevin Landel CIE
    SVP/Innovation/Payments
    Patelco CU
    Pleasanton CA
    925.460.4611
    ------------------------------


  • 2.  RE: GRC Platforms

    Posted Dec 15, 2020 07:16 AM

    I'm not sure what we currently use, but in my previous life we used Tandem / Conetrix, which I highly recommend. They have modules for vendor management, BCP, ERM, etc. along with mobile apps for employees and just overall very comprehensive and priced reasonably. The mobile app allows phone trees, text blasts, BCP access, contact information, etc. all on your phone, which is great in an actual emergency.


    Niki Schaumberg

    Chief Financial Officer
    Fox Communities Credit Union
    3401 E. Calumet Street Appleton, 54915
    P: 920-993-3753 | E: nschaumberg@foxcu.org





    Confidentiality Notice: This message is intended only for the use of the individual or entity named above, and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not the intended recipient, or the employee or agent responsible for delivering this message, you are hereby notified that you have received this message in error, and that any review, dissemination, distribution, or copying of this message is strictly prohibited. Please reply to the sender that you have received the message in error, and then delete it. Fox Communities Credit Union does not endorse or is not bound by any opinions, conclusions or other information in this message that do not relate to its official business.