Parapet integrated risk management

Integrated risk management, not simply GRC

Governance, risk and compliance are important parts of Parapet, but integrated risk management goes further. It connects different risk domains, obligations, controls, assurance activity, decisions and remediation work so leaders can see how they influence one another.

Parapet has been developed as a production platform since 2016. It supports enterprise risk management, IT risk, vendor and third-party risk, governance, compliance, audit, assurance, business continuity, remediation, tasks, notifications, analytics and visualisation.

See the whole risk environment

• Bring risk registers and related governance work into connected workspaces
• Link obligations, controls, assurance findings, actions and ownership
• Track tasks, notifications, remediation and decision history
• Present dashboards and visual views for operational teams and leadership
• Adapt the platform as the organisation's risk maturity and operating model evolve

Configured around your organisation

More than 300 configuration pages support detailed product and integration configuration. Parapet has been integrated with environments including Azure, AWS, ServiceNow CMDB and SAP. A detailed OpenAPI 3.2 definition is provided to clients so approved teams can use the platform's functionality programmatically.

Existing risk registers can be brought in through automated spreadsheet import, API-based bulk loading and, where appropriate, selected database migration.

Deployment and scale

Parapet can be delivered as SaaS, within a customer data centre, or in an Azure or AWS region selected by the customer. Its architecture separates the front end, database and stateless middle tier, including the API. Multiple middle-tier instances can operate behind a load balancer so requests can be served by any available instance.

One anonymous banking deployment supports approximately 30,000 users. Deployment design, capacity and integration scope are agreed for each organisation.

A practical implementation path

A typical implementation is completed in three to four weeks when scope, data and stakeholder availability match the standard delivery approach. Configuration and implementation support are usually included, together with train-the-trainer enablement. More complex integration, migration or assurance requirements may extend the plan.

Explore product-neutral integrated risk management advisory or visit Parapet.