CoreStream 2.5 Release Notes

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve. In terms of showcase features, CoreStream can now automatically generate a risk…

Lucy Montague Avatar

Our 2.5 release is a combination of showcase features, and some smaller changes that will help us continue our work on ensuring CoreStream is the most intuitive GRC Platform available. We have also ensured that non-functionals continue to receive the attention they deserve.

In terms of showcase features, CoreStream can now automatically generate a risk bowtie, showing the causes and consequences for a given risk, along with the preventative and recovery controls and mitigation that are being performed. We have received positive feedback on this from clients already, many of whom are keen to utilise this in risk workshops with the aim of making them more interactive.

The 2.5 release of CoreStream also introduces our support for the submission of items by users who are not authenticated. This helps us broaden our offering in the whistleblowing / speak-up areas as well as opening up opportunities for members of the public to submit items directly into CoreStream. This is a welcome addition for clients utilising CoreStream for subject access requests (SARs) and freedom of information (FOI) requests, removing the need for users to key cases into CoreStream when they are received through other means.

Continuing our focus on acting upon client feedback, we are also providing the ability for users to interrogate version history at the field level. The data to do this has always been available, and we are now changing the way we surface the information, in line with the way users interact with the Platform. The ‘view versions’ feature in CoreStream will still be available, with the field level option being supplementary.

As we close 2.5, we are already excited about 2.6. CoreStream has utilised Artificial Intelligence (AI) for some time but we are about to take this to the next level…

Thanks,

Rich

FAQ

What was introduced in CoreStream GRC version 2.5?

In December 2023, CoreStream GRC 2.5 delivered a blend of showcase features and usability improvements designed to make the platform even more intuitive. The headline updates included automatic risk bowtie generation, support for unauthenticated submissions, and field-level version history visibility, all driven by client feedback.

What did the unauthenticated submission feature in version 2.5 enable?

Version 2.5 introduced the ability for external users, such as members of the public or third parties, to submit items directly into CoreStream GRC without logging in. This opened new possibilities for handling whistleblowing, speak-up reports, and data access or freedom of information (FOI) requests more efficiently.

What guided the version 2.5 release improvements?


Every enhancement in version 2.5 stemmed from direct client feedback and CoreStream’s ongoing commitment to improving user experience. The focus remained on building the most intuitive and flexible GRC platform available—while continuing to invest in non-functional improvements such as performance, scalability, and security.

What was next for CoreStream GRC after version 2.5?

Clients were able to download the full 2.5 Release Notes from the CoreStream portal or contact their account manager for a personalized demonstration. New users could request a demo to explore how CoreStream GRC helped organizations visualize risk, simplify compliance, and enhance transparency across every process.

  • The latest cyber shocks and impact every business leader needs to know

    The latest cyber shocks and impact every business leader needs to know

    Over the past year, cyber-attacks have stopped looking like technical failures and started behaving like prolonged business crises.  Retailers, airlines, manufacturers, healthcare providers and media organizations have all been headline news for their cyber incidents. In many cases, the initial breach was only the beginning. We witnessed; operations were disrupted, supply chains stalled, customer services faltered and leadership teams were forced into crisis mode long after systems…

  • What a Head of Controls looks for in a GRC platform: A real-life case study and the common mistakes to avoid

    What a Head of Controls looks for in a GRC platform: A real-life case study and the common mistakes to avoid

    At CoreStream GRC, we recently wrapped up a successful GRC implementation with Wickes, and it highlighted something we see time and again. The difference between a smooth GRC rollout and a painful one is rarely about features alone. It usually comes down to a handful of early decisions. Small choices that either remove friction or…

  • Stop playing defense: The comprehensive guide to enterprise risk management for value-based GRC leaders

    Stop playing defense: The comprehensive guide to enterprise risk management for value-based GRC leaders

    The enterprise risk management wake-up call Enterprise risk management (ERM) has been talked about for years. Yet, in practice, many programs still amount to little more than documentation and reporting. While, they may look reassuring on paper, they are rarely tested when it matters. In our conversation with our expert community, we have seen that…