Vantage GRC
Vantage is a governance, risk and compliance platform. Work is organised into five modules that share one set of users, roles and audit trail:
| Module | What it answers |
|---|---|
| Compliance | Are our controls in place against a framework (NCA ECC, SOC 2, ISO 27001)? |
| Risk | What could go wrong, how bad would it be, and what are we doing about it? |
| Internal Audit | Independent assurance — plan, field, report and track remediation. |
| TPRM | Are our vendors safe to rely on? |
| Governance | Policies, coverage and acknowledgments. |
Before you start
Two ideas explain most of how the platform behaves.
Everything is scoped to an organisation. Your account belongs to one or more organisations and you only ever see one at a time. Switch with the organisation menu in the sidebar.
Nothing important happens without a record. Every create, change and sign-off is written to an immutable audit trail with who did it and when. This is deliberate: the platform is built to be evidence in a regulator's hands, so actions are recorded rather than silently applied.
Where to go next
- Setting the platform up for the first time → Configuration
- Assessing controls against a framework → Running an assessment
- Building the risk register → Risk register
- Assessing a vendor → Third-party risk
Use the version selector in the top-right to match the release you are running. Your administrator can confirm it from Settings → About.