CoreStream 2.4 Release Notes

CoreStream 2.4 is an exciting release for a number of reasons. It is the first release where we have adopted our new fixed length release process, ensuring we deliver a new Platform release every 2 months. It means being strict with scope, but it helps ensure we can articulate our roadmap with more confidence, and…

Richard Eddolls Avatar
CoreStream GRC logo against dark blue background and blue and green gradient

CoreStream 2.4 is an exciting release for a number of reasons. It is the first release where we have adopted our new fixed length release process, ensuring we deliver a new Platform release every 2 months. It means being strict with scope, but it helps ensure we can articulate our roadmap with more confidence, and clients have access to new releases more frequently. In addition to this, technical work on integrations has been separated from the release. This means we can work on integrations without impacting the timeframe of our core release.

On the feature front, there are a number of great additions. The calendar view reflects further progress on the Social GRC front and provides an additional interface for clients to view and edit their data in CoreStream. Our next generation Policy Manager now has further styling improvements and integrated attestations with the optional feature to record the amount of time that a user spends reading the given policy, procedure or standard.

On the configuration front, we have continued to make improvements to ensure we can do more with less for our clients. The site builder has been extended to generate tree views and create lookups and we have added the aged chart and heat maps to our admin user configurable dashboards. We are now also able to automatically generate data import templates AND make the data import tool available to clients.

In 2.5 we are looking at further improving our whistleblowing capability with a feature that means those wishing to submit anonymously can do so without authenticating, providing them with a greater level of comfort in doing so.

Please do get in touch with any suggested improvements, or if you wish to discuss any of the features listed in more detail.

Thanks,

Rich

FAQ

What was significant about the CoreStream GRC 2.4 release?

The September 2023 version 2.4 release marked the first time CoreStream GRC adopted its fixed-length release process, committing to new platform updates every two months. This change improved transparency and predictability for clients, allowing CoreStream GRC to deliver enhancements more frequently while maintaining strict control over release scope.

What was new in version 2.4?

CoreStream GRC 2.4 introduced major functional and design enhancements, including a new calendar view for data visualization, upgrades to the next-generation Policy Manager, and expanded configuration tools for administrators. Together, these updates improved usability, efficiency, and customization across the platform.

What did the calendar view feature offer?

The September 2023 CoreStream GRC version 2.4 release offered a calendar view provided a visual and interactive way for users to manage and edit data directly within CoreStream GRC. It represented another step forward in CoreStream’s focus on “Social GRC,” making risk and compliance management more intuitive and collaborative.

What improvements were made to the Policy Manager?

The September 2023 CoreStream GRC version 2.4 release offered a next-generation Policy Manager, which received design refinements and integrated attestations, enabling organizations to track user acknowledgment and even measure how long users spent reading policies, procedures, or standards. This helped organizations verify engagement and compliance more accurately.

  • Cyber Essentials tightens in April 2026: MFA and patching can now fail you fast

    Cyber Essentials tightens in April 2026: MFA and patching can now fail you fast

    From April 2026, more organizations will fail Cyber Essentials. Not because the five controls are changing, but because the scheme is becoming far less forgiving of gaps between what you say you do and what is actually happening on systems day to day. Cyber Essentials has always been sold as baseline cyber hygiene. Baseline does…

  • Designing your dream GRC home part 4: wiring the house – making automation helpful, not burdensome 

    Designing your dream GRC home part 4: wiring the house – making automation helpful, not burdensome 

    By Head of Client Solution Design, Lionel Matsuya If foundations set the purpose, and corridors shape the flow, wiring determines whether a house actually works in day-to-day life.  And just as modern homes are filled with smart devices, sensors and integrations, today’s GRC environments are increasingly wired with automation, clever logic and AI.  Here’s the central idea upfront:  Automation in GRC technology isn’t about throwing in every…

  • A practical step‑by‑step guide to the Third‑Party Risk Management lifecycle

    A practical step‑by‑step guide to the Third‑Party Risk Management lifecycle

    Third parties keep modern businesses running. Vendors host systems, process data, deliver critical services, and sit inside day-to-day operations. That reality creates two truths at once: The problem is not that teams do not understand the risk. The problem is that a lot of third-party risk management (TPRM) programs were built for a simpler world.…