Case Study: Zurich Insurance achieves end-to-end vendor risk management for 500+ vendors in 12 weeks with MetricStream GRC Cloud

From Start to Finish in 12 Weeks with MetricStream GRC Cloud

Zurich Insurance’s UK sourcing team faced a tight mandate to implement vendor risk management for 500+ vendors in just 12 weeks. Their existing VRM processes were manual, spreadsheet-driven and inconsistently applied across the organization, creating visibility, control and efficiency gaps that needed a rapid, scalable fix.

They selected MetricStream GRC Cloud and went live in 12 weeks, centralizing vendor data, automating workflows and streamlining due diligence, security assessments, assurance testing and issue management. The deployment delivered clearer risk visibility, simplified governance, scalability for global rollout and a 20% reduction in FTE effort, with plans underway to add vendor self-service and broader contract/payment integrations.

Zurich