Case Study: Safaricom achieves integrated GRC and unified risk intelligence with MetricStream

How They’re Leveraging MetricStream Products for Superior Risk Management and Compliance Performance

Safaricom PLC, East Africa’s leading telecommunications and mobile money provider, faced growing operational and regulatory complexity across hundreds of dispersed processes and systems. The company struggled with siloed risk management, duplicated processes, fragmented assets, and the need for a single source of truth to track regulatory obligations, compliance status, and enterprise-wide risks.

From 2017 Safaricom implemented MetricStream’s GRC platform—prioritizing Enterprise Risk, Compliance Management, Business Continuity, and Case Management—supported by a dedicated project team, training, data mapping, and system integrations. The rollout delivered an integrated risk-intelligence framework, improved compliance (including ISO alignment), unified dashboards for management, streamlined investigations, and higher efficiency and productivity for risk and compliance teams.

Safaricom

Ken Kaberia

Head of Enterprise Risk Management