CoreStream 2.5 Release Notes

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve. In terms of showcase features, CoreStream can now automatically generate a risk…

Richard Eddolls Avatar
CoreStream GRC logo against dark blue background and blue and green gradient

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve.

In terms of showcase features, CoreStream can now automatically generate a risk bowtie, showing the causes and consequences for a given risk, along with the preventative and recovery controls and mitigation that are being performed. We have received positive feedback on this from clients already, many of whom are keen to utilise this in risk workshops with the aim of making them more interactive.

The 2.5 release of CoreStream also introduces our support for the submission of items by users who are not authenticated. This helps us broaden our offering in the whistleblowing / speak-up areas as well as opening up opportunities for members of the public to submit items directly into CoreStream. This is a welcome addition for clients utilising CoreStream for subject access requests (SARs) and freedom of information (FOI) requests, removing the need for users to key cases into CoreStream when they are received through other means.

Continuing our focus on acting upon client feedback, we are also providing the ability for users to interrogate version history at the field level. The data to do this has always been available, and we are now changing the way we surface the information, in line with the way users interact with the Platform. The ‘view versions’ feature in CoreStream will still be available, with the field level option being supplementary.

As we close 2.5, we are already excited about 2.6. CoreStream has utilised Artificial Intelligence (AI) for some time but we are about to take this to the next level…

Thanks,

Rich

FAQ

What was introduced in CoreStream GRC version 2.5?

In December 2023, CoreStream GRC 2.5 delivered a blend of showcase features and usability improvements designed to make the platform even more intuitive. The headline updates included automatic risk bowtie generation, support for unauthenticated submissions, and field-level version history visibility, all driven by client feedback.

What did the unauthenticated submission feature in version 2.5 enable?

Version 2.5 introduced the ability for external users, such as members of the public or third parties, to submit items directly into CoreStream GRC without logging in. This opened new possibilities for handling whistleblowing, speak-up reports, and data access or freedom of information (FOI) requests more efficiently.

What guided the version 2.5 release improvements?


Every enhancement in version 2.5 stemmed from direct client feedback and CoreStream’s ongoing commitment to improving user experience. The focus remained on building the most intuitive and flexible GRC platform available—while continuing to invest in non-functional improvements such as performance, scalability, and security.

What was next for CoreStream GRC after version 2.5?

Clients were able to download the full 2.5 Release Notes from the CoreStream portal or contact their account manager for a personalized demonstration. New users could request a demo to explore how CoreStream GRC helped organizations visualize risk, simplify compliance, and enhance transparency across every process.

  • US & UAE GRC headlines: Regulators are widening the assurance perimeter.

    US & UAE GRC headlines: Regulators are widening the assurance perimeter.

    Recent regulatory activity in the US and UAE points to a bigger GRC trend: regulators are looking beyond policies and asking whether organizations can prove control across more areas of the business.  In the US, the Department of Justice announced a $549.5m False Claims Act settlement over alleged evasion of customs duties on Chinese aluminum extrusions. The…

  • What is the Secure Controls Framework and why does it matter for compliance?

    What is the Secure Controls Framework and why does it matter for compliance?

    Key takeaways Compliance teams are not short of frameworks. They are short of time, clarity and defensible evidence. The Secure Controls Framework, or SCF, is designed to reduce duplication by consolidating 200+ laws, regulations and frameworks into a single control architecture. SCF covers 1,400+ controls across 33 domains, giving organizations a clearer way to understand…

  • Corporate governance

    Corporate governance

    What is corporate governance?  The Cadbury Report gave one of the most widely used definitions of corporate governance: “Corporate governance is the system by which companies are directed and controlled.“ The Cadbury Report However, beyond day-to-day operations corporate governance is also the system by which a company is held accountable. It covers how the board…