September 12, 2016 | Palo Alto, California: MetricStream, the market leader in Governance, Risk, and Compliance (GRC) and Quality Management Solutions, announced today that its IT GRC solution will feature a built-in integration with the UCF’s Common Controls Hub-based IT content delivery model. This integration will provide MetricStream customers with access to the latest IT-Compliance content including over 200,000 individual mandates from 800+ laws and standards across industries and geographies, on demand.

This upgrade eliminates IT Compliance managers’ need to wait for quarterly updates on new or updated content or changes to IT regulations. The API-based integration also enables new authority documents to be brought into the MetricStream IT GRC solution almost instantaneously, allowing IT compliance managers to proactively manage security and compliance assessments. Additionally, the regulations, standards, and frameworks of specific interest to the business are automatically mapped to MetricStream GRC Libraries, which can be further leveraged for IT Compliance self-assessments or audits.

Craig Isaacs, CEO of Unified Compliance said, “We are pleased to partner with MetricStream as the first GRC vendor to integrate the new UCF API within its IT GRC solution. The Common Controls Hub API significantly streamlines the process where changes to internal citations and compliance are demonstrably communicated to the organization’s employees on a real time basis. Users can leverage the API to create a concise, harmonized list of mandate and implied controls to improve the efficiency and effectiveness of their overall Governance, Risk Management, and Compliance programs.”

“Today’s modern, global, and highly networked organization requires real-time intelligence and information that supports its IT compliance and risk management initiatives,” said Vasant Balasubramanian, Senior Vice President of Product Management at MetricStream. He continued, “The significant feature of this integration is that our customers will now have direct access to the UCF’s Common Controls Hub for Authority Documents, Citations, Common Controls, Audit Questions, and more.”

As organizations manage an increasingly complex and evolving IT ecosystem, the ability to gain real-time information about changes in regulations and related updates can significantly improve their ability to respond to IT risks and compliance requirements. MetricStream’s enhanced IT GRC solution can map regulatory changes and provide real-time updates to an organization’s processes, assets, risks and controls, enabling IT Compliance managers to identify the impact of the change in a proactive manner, and plan an appropriate course of action.

About Unified Compliance and the Unified Compliance Framework®

Since 1992, Unified Compliance has developed ground-breaking tools to support IT best practices with a focus on solutions and processes that further the science of compliance, including harmonization methods, metrics, systems continuity and governance. The Unified Compliance Framework (UCF) was created by Dorian Cougias and his research partner, Marcelo Halpern of the international law firm Perkins Coie, which oversees all legal aspects of the UCF. Twice honored with a GRC Innovation Award for Technical Innovation in Regulatory Intelligence for Compliance Management by independent governance, risk, and compliance (GRC) analyst firm GRC 20/20 Research, the UCF provides targeted, harmonized research on what an organization needs to do — and not do — to achieve and maintain compliance with industry, government, and best practice demands. The UCF’s architecture was specifically designed for the delivery of all of the information necessary to establish governance methodologies. Customers using the UCF can document and leverage the links between harmonized controls, records, assets (and their configurations), events, metrics, and roles.

More information can be found at and

About MetricStream

MetricStream is the independent market leader in enterprise cloud applications for governance, risk, compliance (GRC), and quality management. MetricStream apps and software solutions improve business performance by strengthening risk management, corporate governance, regulatory compliance, audit management, vendor governance, and quality management for organizations across industries, including banking and financial services, health care, life sciences, energy and utilities, consumer brands, government, technology, and manufacturing. MetricStream is headquartered in Palo Alto, California, with an operations and GRC innovation center in Bengaluru, India, and sales and operations support in 12 other cities globally.(

Press contact

[email protected]

Get a demo Download RFP Template Pricing Contact