CoreStream 2.5 Release Notes

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve. In terms of showcase features, CoreStream can now automatically generate a risk…

Lucy Montague Avatar

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve.

In terms of showcase features, CoreStream can now automatically generate a risk bowtie, showing the causes and consequences for a given risk, along with the preventative and recovery controls and mitigation that are being performed. We have received positive feedback on this from clients already, many of whom are keen to utilise this in risk workshops with the aim of making them more interactive.

The 2.5 release of CoreStream also introduces our support for the submission of items by users who are not authenticated. This helps us broaden our offering in the whistleblowing / speak-up areas as well as opening up opportunities for members of the public to submit items directly into CoreStream. This is a welcome addition for clients utilising CoreStream for subject access requests (SARs) and freedom of information (FOI) requests, removing the need for users to key cases into CoreStream when they are received through other means.

Continuing our focus on acting upon client feedback, we are also providing the ability for users to interrogate version history at the field level. The data to do this has always been available, and we are now changing the way we surface the information, in line with the way users interact with the Platform. The ‘view versions’ feature in CoreStream will still be available, with the field level option being supplementary.

As we close 2.5, we are already excited about 2.6. CoreStream has utilised Artificial Intelligence (AI) for some time but we are about to take this to the next level…

Thanks,

Rich

FAQ

What was introduced in CoreStream GRC version 2.5?

In December 2023, CoreStream GRC 2.5 delivered a blend of showcase features and usability improvements designed to make the platform even more intuitive. The headline updates included automatic risk bowtie generation, support for unauthenticated submissions, and field-level version history visibility, all driven by client feedback.

What did the unauthenticated submission feature in version 2.5 enable?

Version 2.5 introduced the ability for external users, such as members of the public or third parties, to submit items directly into CoreStream GRC without logging in. This opened new possibilities for handling whistleblowing, speak-up reports, and data access or freedom of information (FOI) requests more efficiently.

What guided the version 2.5 release improvements?


Every enhancement in version 2.5 stemmed from direct client feedback and CoreStream’s ongoing commitment to improving user experience. The focus remained on building the most intuitive and flexible GRC platform available—while continuing to invest in non-functional improvements such as performance, scalability, and security.

What was next for CoreStream GRC after version 2.5?

Clients were able to download the full 2.5 Release Notes from the CoreStream portal or contact their account manager for a personalized demonstration. New users could request a demo to explore how CoreStream GRC helped organizations visualize risk, simplify compliance, and enhance transparency across every process.

  • UK to regulate crypto by 2027: What it means for global crypto and fintech firms

    UK to regulate crypto by 2027: What it means for global crypto and fintech firms

    The UK’s decision marks the end of crypto’s regulatory grey zone. At CoreStream GRC, we’re seeing global crypto and fintech teams move from asking if regulation will land, to working out how to prepare for it in a way that does not slow the business down. In this piece our team at CoreStream GRC breaks…

  • What the team has learnt in 2025: 6 quick fixes for GRC

    What the team has learnt in 2025: 6 quick fixes for GRC

    2025 has been a revealing year for Governance, Risk and Compliance teams. Across CoreStream GRC’s community events in London and New York, industry events like #RISK Europe, our design workshops and hundreds of conversations with clients and experts, one interesting theme kept surfacing. Many of the most common GRC challenges are not structural failures. They…

  • Why public sector teams choose CoreStream GRC for information asset management

    Why public sector teams choose CoreStream GRC for information asset management

    Public sector organizations are under constant pressure to manage complex information environments and stay compliant with GDPR, the DSP Toolkit and internal information governance standards. A reliable information asset register is no longer a nice-to-have. It is the baseline for safe data processing, confident audits, and accountable governance.  This is where CoreStream GRC stands out.  Public sector teams choose…