Case Study: Global Pharmaceutical and Health Care Conglomerate achieves real-time supplier risk visibility and streamlined GRC with MetricStream

Global Pharmaceutical and Health Care Conglomerate Accelerates Risk Assessment and Mitigation Across Its Supplier Network

A global pharmaceutical and health care conglomerate operating 250+ companies across three divisions and 125,000+ employees faced fragmented, spreadsheet-driven risk and compliance processes across its supplier network. Multiple systems with varying data structures, no common GRC taxonomy, duplicated effort, and siloed audits made aggregating and normalizing risk data slow and opaque, hampering timely decision‑making.

The company implemented MetricStream Enterprise Risk Management out‑of‑the‑box, creating a centralized GRC taxonomy and an integrated view of supplier, quality, and compliance risks across 1,200+ suppliers, 250+ sites and 90+ products for some 400 users. The solution streamlined policies, controls and audits, embedded risk ownership, and cut risk-data aggregation from a five‑week process to real‑time visibility—enabling faster, more informed mitigation and board-level decisions.