Case Study: Largest South African Supermarket Retailer achieves accelerated maturity in operational risk, controls, and policy management with MetricStream

Largest South African Retailer Accelerates Maturity of Operational Risk, Controls, And Policy Management Processes With MetricStream

The largest supermarket retailer in South Africa, operating over 3,000 stores across 16 countries, sought to streamline fragmented risk, control, and loss-management processes. The company faced no unified view of risk, difficulty visualizing interconnections between risks and controls, weak internal financial controls, and heavy reliance on manual Excel-based analysis.

The retailer implemented MetricStream’s BusinessGRC suite—Operational Risk, Policy & Document, Internal Audit, and Business Continuity Management—creating a centralized risk repository and standardized taxonomy. The solution automated management of ~1,500 policies, enabled quarterly attestations for ~1,000 internal controls, and now manages more than 3,600 risks and 3,100 controls, improved reporting (260‑page CFO report generated in under an hour), and lifted ERM maturity from Level 3 to Level 4.