How can we help?

StrataGRC includes comprehensive features for audit management, risk assessment, compliance tracking, investigation management, and quality assurance. Key features include risk register with dynamic calculation, control library, audit planning and execution, findings management, AI-powered insights, relationship mapping for investigations, and quality review systems.

Our AI algorithms analyze your audit findings, risk data, and historical patterns to identify trends, predict emerging risks, and generate executive summaries. The AI can highlight connections between seemingly unrelated issues and recommend areas for improvement that might otherwise go unnoticed.

StrataGRC includes: Audit Management (planning, fieldwork, reporting), Risk Management (register, assessment, mitigation), Control Library (testing, effectiveness tracking), Investigation Management (case management, evidence), Compliance Management (framework tracking), KPI & Strategy (performance tracking), Policy Library (version control), and Activity Reporting (daily logs).

StrataGRC is accessible via any modern web browser on desktop, tablet, or mobile devices. A native mobile app is in development and will be available for Enterprise customers. The web application is fully responsive and optimized for mobile use.

Audit planning in StrataGRC allows you to create annual audit plans, define audit engagements, assign team members, and link to specific auditable units. You can schedule audits based on risk assessments, regulatory requirements, or management requests. The system supports multi-year planning and resource allocation.

Yes, StrataGRC provides customizable workpaper templates. You can create checklists tailored to specific audit types, industries, or regulatory requirements. Workpapers can include testing procedures, evidence requirements, and automated scoring. Templates can be saved and reused across audits.

Findings are created during fieldwork with the 5 C's framework (Criteria, Condition, Cause, Consequence, Corrective Action). Findings are assigned to auditees for response, tracked through remediation, and validated upon closure. The system sends automated reminders for overdue responses and provides dashboards for tracking finding status.

Yes, StrataGRC includes flexible report generation. You can create executive summaries, detailed findings reports, status reports, and custom reports. Reports can be exported to PDF, Word, or Excel formats. Report templates can be customized with your organization's branding and formatting requirements.

StrataGRC supports multiple methodologies: Traditional (Impact × Likelihood), FMEA (Severity × Occurrence × Detection), and custom scoring models. You can configure risk matrices, define scoring criteria, and tailor methodologies to your industry or organizational requirements.

Yes, StrataGRC automatically generates risk heat maps based on your risk assessments. Heat maps can be filtered by category, department, or time period. You can visualize inherent vs. residual risk, track risk trends over time, and export heat maps for presentations and reports.

Risks can be linked to multiple controls in the control library. When controls are tested, the results automatically update the associated risk's residual score. This provides real-time visibility into risk exposure based on control effectiveness. You can also map one control to multiple risks for comprehensive coverage.

Yes, StrataGRC allows you to define risk appetite levels (e.g., Low, Medium, High, Critical) with custom thresholds. Risks exceeding appetite thresholds are automatically flagged for management attention. You can set different appetites for different risk categories and generate reports showing risk profile vs. appetite.

StrataGRC IMS supports various investigation types including fraud investigations, HR investigations, compliance investigations, whistleblower complaints, and incident investigations. The system is flexible enough to handle simple cases or complex multi-jurisdictional investigations.

Evidence can be uploaded in various formats (documents, images, audio, video) with chain of custody tracking. Each piece of evidence is time-stamped, linked to specific cases, and access-controlled. The system maintains a complete audit trail of who accessed or modified evidence and when.

Yes, StrataGRC includes advanced case intelligence features. You can link related cases, identify persons of interest across multiple investigations, and visualize relationships. The system can automatically detect potential duplicate cases based on similarity scoring.

Yes, StrataGRC includes a comprehensive quality review system. Investigations can be reviewed against predefined quality criteria, scored for completeness and compliance, and approved before closure. Review templates can be customized for different investigation types.

We offer three main plans: Essentials (₦150,000/month) for basic audit management, Professional (₦350,000/month) with full GRC features, and Enterprise (custom pricing) with advanced features and dedicated support. Each plan includes different features and levels of support. We also offer a 10% discount for annual prepayment and special pricing for NGOs and educational institutions.

Yes, we offer a 14-day free trial with full access to all features of the Professional plan. No credit card is required to start your trial, and our team will provide onboarding support to help you get the most value during your trial period.

Yes, Enterprise plans include custom pricing based on your organization's size, requirements, and deployment preferences. We offer flexible licensing models including per-user, per-module, or enterprise-wide licenses. Contact our sales team for a customized quote.

We accept bank transfers, corporate checks, and major credit cards. For Enterprise customers, we can arrange quarterly or annual billing cycles. All prices are in Nigerian Naira (NGN) and exclude VAT.

Absolutely. We use industry-standard 256-bit encryption for data at rest and in transit. Our infrastructure is hosted in secure data centers with regular security audits and compliance checks. We also offer on-premise deployment options for Enterprise customers with specific security requirements.

Yes, StrataGRC offers comprehensive integration capabilities through our RESTful API and webhook support. We can integrate with your existing HR systems, financial systems, and other business applications. Our Enterprise plan includes custom connector development.

We perform automated daily backups with 30-day retention. Backups are stored in geographically separate locations for disaster recovery. Enterprise customers can request more frequent backup schedules and custom retention policies.

StrataGRC supports multiple compliance frameworks including ISO 27001, COSO, COBIT, SOX, and local Nigerian regulatory requirements. Our compliance module allows you to map controls to multiple frameworks and track compliance status across all applicable standards.

Yes, StrataGRC provides a comprehensive REST API for all major modules. The API supports authentication, CRUD operations, and webhooks for real-time notifications. API documentation is available in the Developer section, and Enterprise customers receive dedicated integration support.