CoreStream 2.5 Release Notes

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve. In terms of showcase features, CoreStream can now automatically generate a risk…

Richard Eddolls Avatar
CoreStream GRC logo against dark blue background and blue and green gradient

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve.

In terms of showcase features, CoreStream can now automatically generate a risk bowtie, showing the causes and consequences for a given risk, along with the preventative and recovery controls and mitigation that are being performed. We have received positive feedback on this from clients already, many of whom are keen to utilise this in risk workshops with the aim of making them more interactive.

The 2.5 release of CoreStream also introduces our support for the submission of items by users who are not authenticated. This helps us broaden our offering in the whistleblowing / speak-up areas as well as opening up opportunities for members of the public to submit items directly into CoreStream. This is a welcome addition for clients utilising CoreStream for subject access requests (SARs) and freedom of information (FOI) requests, removing the need for users to key cases into CoreStream when they are received through other means.

Continuing our focus on acting upon client feedback, we are also providing the ability for users to interrogate version history at the field level. The data to do this has always been available, and we are now changing the way we surface the information, in line with the way users interact with the Platform. The ‘view versions’ feature in CoreStream will still be available, with the field level option being supplementary.

As we close 2.5, we are already excited about 2.6. CoreStream has utilised Artificial Intelligence (AI) for some time but we are about to take this to the next level…

Thanks,

Rich

FAQ

What was introduced in CoreStream GRC version 2.5?

In December 2023, CoreStream GRC 2.5 delivered a blend of showcase features and usability improvements designed to make the platform even more intuitive. The headline updates included automatic risk bowtie generation, support for unauthenticated submissions, and field-level version history visibility, all driven by client feedback.

What did the unauthenticated submission feature in version 2.5 enable?

Version 2.5 introduced the ability for external users, such as members of the public or third parties, to submit items directly into CoreStream GRC without logging in. This opened new possibilities for handling whistleblowing, speak-up reports, and data access or freedom of information (FOI) requests more efficiently.

What guided the version 2.5 release improvements?


Every enhancement in version 2.5 stemmed from direct client feedback and CoreStream’s ongoing commitment to improving user experience. The focus remained on building the most intuitive and flexible GRC platform available—while continuing to invest in non-functional improvements such as performance, scalability, and security.

What was next for CoreStream GRC after version 2.5?

Clients were able to download the full 2.5 Release Notes from the CoreStream portal or contact their account manager for a personalized demonstration. New users could request a demo to explore how CoreStream GRC helped organizations visualize risk, simplify compliance, and enhance transparency across every process.

  • General Data Protection Regulation (GDPR) and Data Privacy management 

    General Data Protection Regulation (GDPR) and Data Privacy management 

    What is GDPR and Data Privacy management? The General Data Protection Regulation (GDPR) is the EU data protection law that governs how organizations collect, use, store, share, protect, and delete personal data. Data privacy management is the ongoing process organizations use to meet GDPR and other privacy obligations in practice. In governance, risk, and compliance…

  • Compliance audit

    Compliance audit

    What is a compliance audit? A compliance audit is a structured review that checks whether an organization is meeting specific laws, regulations, standards, policies, contractual requirements, or internal controls. It helps confirm whether compliance requirements are understood, owned, evidenced, and operating in practice. In governance, risk, and compliance (GRC), a compliance audit matters because it…

  • Compliance reporting

    Compliance reporting

    What is compliance reporting? Compliance reporting is the process of collecting, analyzing, and presenting information that shows whether an organization is meeting its compliance obligations. It helps leadership, boards, auditors, regulators, and internal stakeholders understand compliance status, control effectiveness, issues, breaches, remediation, and areas needing attention. In governance, risk, and compliance (GRC), compliance reporting matters…