Case Study: Sterling Bank achieves unified, enterprise-wide GRC and risk visibility with MetricStream

Adopting an Integrated Approach to GRC

Sterling Bank, a Pacific Northwest community bank with over $9 billion in assets and 184 branches, faced a near-collapse after concentrated construction lending losses in 2007–2008 and was required by regulators to adopt a comprehensive risk-management program. The bank struggled with fragmented risk data in spreadsheets and SharePoint, inconsistent processes across the bank and parent company, and the need to give the Board a single, actionable view of enterprise risk while building management buy-in and formal ERM practices.

Sterling implemented a centralized, integrated GRC program powered by MetricStream’s suite, building a common GRC library, clear risk/control taxonomy, governance structure, dashboards and KRIs, and automated compliance testing and self-assessments. The program produced a single source of truth, stronger risk culture and board engagement, regulatory approval, and measurable reporting improvements—culminating in Sterling winning the 2013 GRC Value Award for Enterprise GRC.

Sterling Bank

Dan Gunther

Enterprise Risk Manager