GRC

Expanding Beyond Traditional Governance, Risk & Compliance

|

Updated:

|

Published:

GRC in Onspring

A Healthcare & Human Service Case Study

OVERVIEW

Manual tracking of GRC functions in spreadsheets harbored too many limitations and increased the risk from human error, so Sevita adopted Onspring’s business process automation platform to create efficiency and more accuracy. What started as a specific GRC initiative expanded into a robust process improvement program across multiple functions of the business.

Profile

Industry

Reach

“Onspring is more than a standard GRC system, which was exactly what we needed.”

 – Jennifer Neville, Associate General Counsel

Challenge

Manual tracking of GRC functions in spreadsheets has limitations. Spreadsheets limit reporting and increase the risk from potential human error and oversight.

With so many processes bogged down in laborious, static spreadsheets, Sevita adopted Onspring to better manage all GRC processes and reporting needs. Business owners believed the platform also provided a simplified method to track and manage company licenses.

Efficiencies were soon added across multiple areas of the business as team members saved hours each week collecting, managing, and reporting on data.

Solution

Two distinct phases of implementation in Onspring were initially planned by business owners. 

Breaking programs into phases enabled faster launches and impact to business functions needing immediate support. 

60 days into Phase I implementation, system administrators realized how they could customize Onspring to deliver on the spreadsheet automation requests they kept receiving from various teams.  

Soon additional phases were added to implementation, increasing scale and ROI.

Launch Phases

Phase I: Governance, Risk & Compliance (Priorities)

  • Risk management
  • Policy management
  • Regulatory compliance
  • Employee safety

Phase II: Licensure Database & Custom Programs

  • Legal entity management
  • Corporate governance
  • Mobile program site visit audits
  • Environment, social & governance (ESG)
  • CARES Act funding
  • Acquisition tracking
  • Insurance policy management

Phase III: Governance, Risk & Compliance (Less Critical)

  • Emergency preparedness
  • Disaster recovery
  • IT controls
  • Government relations compliance

Spotlight: Risk Management

Goal

Increase enterprise-wide efficiency and reduce risk.

Challenge

Manual tracking in spreadsheets was time-consuming and left a margin for errors.

Solution

Comprehensive application in Onspring conducts annual risk assessments, gathers necessary data, creates and tracks an annual work plan, and report to the Board.

Results

One centralized system to seamlessly connect data, related risks, activate plans, and communicate with stakeholders.

3D bar chart showing risks by category: Compliance, Financial, IT, Operational, Reputational, and Strategic. Unlike traditional GRC visuals, IT has the highest average score (12), Strategic is 8.25; others range from 5.25 to 6.90. Bars indicate risk count by rating.

Results

Real-time Visibility

  • Centralized metrics for Sevita teams
  • Executive dashboards 
  • Automated Board reports

Efficiency

  • Hours of time savings collecting data
  • Automatic connections between risks and corrective actions or annual plans

All Onspring Solutions in Use by Sevita

Share This Story, Choose Your Platform!