eGRC SuiteMicrosoft

Risk Management Software (eGRC Suite)

One live risk register with named owners, scoring, controls and treatment plans, so you can show your board where risk sits and how it is moving.

Request a Demo
Risk Management Software (eGRC Suite), what the product delivers

Risk is one part of the eGRC Suite. See the full platform for governance, risk and compliance.

See the eGRC Suite

Highlights

One risk register Controls tested on evidence Incidents linked to risks Heat maps for the committee

Sound familiar?

  • The risk register is a spreadsheet, and three versions are in circulation
  • Ratings change and nobody can say who changed them or why
  • Controls exist on paper, but nobody has tested whether they work
  • The committee pack takes a fortnight to build and is out of date by the meeting

A risk register that is always current, and a trail to prove it

Risk management only works when everyone is looking at the same register. eGRC gives every risk an owner, an inherent and residual score, the controls that reduce it and a treatment plan with a date. When a rating changes, the register records who changed it and why. Your committee pack is built from the live record, and not from memory.

Know your risks

One risk register

Every risk with a named owner, not a department. Group them by category, business unit or strategic objective, using the taxonomy your board already knows.

Scoring and appetite

Score likelihood and impact on a scale you set. See inherent and residual positions, and get told when a residual score sits outside your appetite.

Treatment plans

Attach actions with owners, dates and progress. See what is overdue before the committee asks.

Versioned register

The position you reported to the committee in March is still retrievable in November, exactly as it was.

Prove your controls work

Control library

Map each control to the risks it mitigates, so a change to one is visible against the other. See which risks are carried by nothing but a policy.

Design and operating tests

Test whether a control is well designed and whether it actually operated, and record both results with the evidence attached to the test.

Issues from failed tests

Raise an issue straight from a failed test, so nothing falls out of the loop between finding and fixing.

Learn from what happens

Incidents and loss events

Log incidents, losses and near-misses in a short form anyone can complete, then link them to the risk and the control that should have caught them.

Root cause and corrective actions

Record why it happened and assign actions with owners and dates. Over a year the log shows which risks are real and which are theoretical.

Heat maps and committee packs

Generate the heat map at inherent or residual, show what moved since the last meeting, and export to Word, Excel or PDF, or straight into an eBoard meeting.

eGRC Suite pricing

Start with the register, add compliance and policies when you are ready, and consolidate groups at Enterprise.

Essentials

Get the register out of the spreadsheet.

$7,200

per year

about $600 a month, billed annually

Non-profit and academic: $5,000 a year

  • Risk register with inherent and residual scoring
  • Control library with testing and evidence
  • Issues and actions tracked to closure
  • Immutable audit trail
  • Heat map and committee export
  • Entra ID single sign-on
Request a quote
Best fit for most organizations

Professional

Run the whole compliance cycle in one place.

$18,000

per year

about $1,500 a month, billed annually

Non-profit and academic: $12,500 a year

  • Everything in Essentials
  • Compliance obligations register and filing calendar
  • Policy lifecycle with staff attestation campaigns
  • Incidents, loss events and near-misses
  • Risk appetite thresholds with breach alerts
  • Export into an eBoard meeting pack
Book a demo

Enterprise

Consolidate a group and answer to several regulators.

From $36,000

per year

about $3,000 a month, billed annually

  • Everything in Professional
  • Multiple entities with group roll-up
  • AI assistance for drafting and control gap detection
  • Hosting and data residency options
  • API access and custom taxonomies
  • Named implementation lead
Talk to an expert

Better together

Governance Suite: $22,500 a year

eBoard Professional + eGRC Professional. About 12% less than buying them separately ($25,500).

Ask about the suite
  • Implementation is separate: a quick start from $3,500, typically $6,000 to $15,000 depending on registers to load and integrations.
  • Billed annually. Monthly billing, where offered, costs 20% more.
  • Non-profit and academic organizations get 30% off subscriptions after a quick verification.
  • Prices exclude VAT (16% in Kenya) and withholding tax.

Not sure which fits? Tell us your team size and what you use today and we will point you to the right option.

Next Steps

  1. 1

    Tell us how it works today

    A short call about how risk management runs in your organization right now, who is involved, and where it hurts.

  2. 2

    See it with your own process

    We set up a working demo using your steps and wording, so you judge it on your reality and not a generic sample.

  3. 3

    Agree scope, then build and launch

    You get a clear plan, timeline and cost before we start. We configure, train your team and stay with you after go-live.

Questions we hear most

Do you impose a fixed risk framework?

No. Your own scoring scales, matrix, appetite thresholds and categories are configured into eGRC. We do not make you adopt a template written for someone else.

Can we see who changed a rating and when?

Yes. Every create, edit, approval and score change is recorded with the user, the time and the previous value, and the record cannot be edited from inside the application.

Does it work with eBoard?

Yes. The register can feed a risk report straight into an eBoard meeting, so the board sees the same record the risk team works from.

Who is it for?

Heads of risk, compliance, internal audit and company secretaries at organizations such as SACCOs, pension schemes, insurers, parastatals and donor-funded NGOs.

How is access controlled?

Sign-in uses your Microsoft Entra ID, and roles decide what each person can see. A committee member can see the reporting view without seeing the working papers.

More solutions you may need

Documents & Collaboration

SharePoint EDMS

Keep every document in one secure place, with versions, approvals and e-signatures, so people stop emailing files around.

Governance & Workflow

eBoard™ By Sibasi

Run board and committee meetings without the paper: agendas, board packs, minutes, tasks and polls in one secure place.

Data & Field Operations

Power BI

Dashboards for HR, finance, grants, risk and manufacturing that turn scattered data into answers leaders can act on.

Interested in Risk Management Software (eGRC Suite)?

Let's explore how it can work for your organization.

Talk to an Expert