State Auto Utilizes ACL GRC to Bolster Value for Management Team & Audit Committee

Travel & Leisure Close - Up

ACL reported that State Automobile Mutual Insurance Company has selected ACL GRC to address audit, compliance, and risk management needs across the business.

The groups said that ACL's solution will allow the State Auto team to streamline operational and assurance processes while driving adherence to Sarbanes-Oxley (SOX) and regulatory compliance requirements unique to the insurance industry.

State Auto was in search of a way to derive value-add results from risk assurance activities that could be organized and presented to management and the Audit Committee. Rather than taking a fractured approach, the risk assurance oriented teams wanted to integrate multiple processes to understand the relationship between operational, SOX, and compliance assurance activities. The team also wanted to move away from using disparate general tools like Microsoft Word, Excel, SharePoint and email, to implement technology that would house the entire audit and compliance management processes in one centralized, risk-centered solution.

"ACL GRC enables the internal audit team to create a continuous workflow and reporting process that allows us to see risks across the board," said Keith Mangine, Assistant Vice President of Internal Audit at State Auto. "The solution was incredibly easy to incorporate into our existing workflow, and will significantly improve our ability to complete audits and reports faster and more efficiently, which in turn increases the value we bring to management and the Audit Committee."

"Moving to a more integrated and simplified way of tackling projects allows internal auditors to focus on delivering truly meaningful impact on the board and executive management's risk agenda and the intelligence for risk-aware decision making," said Dan Zitting, Vice President of Product Management and Design at ACL. "The beauty of ACL GRC is that it empowers all staff to optimize the value of audits, compliance initiatives, enterprise risk and control assessments and, in turn, drive that high-value risk intelligence into all departments' operational execution."