What do you like best?
GRC is a fantastic tool. Very interactive and custimisable. the support is excellent and it is mostly avaiable online and since 2 years ago there it was always online with very few bugs. At my company we now have more than fiftly "columns" or topics being tracked at GRC and our next year GRC revision we will request two more for service onwer and service name.
What do you dislike?
on the one hand it is a fast and customisable tool, but on the other hand the tool revisions are not that dinamic and frequent. It has been difficult to isse a simple SQL developement within the tool and it took more than 2 months to get an answer from customer service being a client for years of one of the "big four" companies. People behind GRC are always easy to deal with but not that proffesional.
Recommendations to others considering the product
Oracle has always been well know by the good performance in customization. From my experience GRC is highly customized at my company, but I would reccomend to be more proactive with the tool revision of all important customers.
What business problems are you solving with the product? What benefits have you realized?
We are tracking governance risk and compliance within Ernst & Young Global Infrastructure Services. We are tracking Audits, certificates, vulnerabilities and other assessments within Global Shared Services. One of the most important problems we are solving is the tracking of the initial dates and ending dates of all IT audits and certificate, but as a reporting tool is not that good. We are not able to get rid od excel pivots.