Prodigy Finance Transforms Risk Management with SureCloud
Streamlining Processes and Strengthening Risk Oversight with SureCloud’s GRC Solution
The Prodigy Finance Challenge
Challenge
Prodigy Finance is a specialist provider of postgraduate finance, offering a borderless credit model which assesses students on their future earning potential, not just their credit history.
It has funded nearly 15,000 students through their postgraduate study, across over 400 schools, and has lent $734 million in the process. 150 countries are eligible for student loans or refinancing deals through Prodigy Finance.
This global reach, a vast network of customers and reliance on sensitive personal information, including financial records, means that Prodigy Finance must meet a wide range of legal and regulatory frameworks.
Michael Light, Credit Risk Lead at Prodigy Finance said:
“We were using a wide range of different single-purpose platforms and processes to manage our Governance, Risk and Compliance (GRC) processes.
We had everything from specialist vendor software applications to manual Excel spreadsheets.
We needed to find a way of linking these various modules and ideas together, both to streamline internal management and costs, but also to improve our GRC posture.
All of the information we needed was sitting in multiple places, with no consolidation or unification.
We have approaching 100,000 unique data subjects, many of whom have made more than one application for finance, so there are some significant data management challenges.”
Solution
The organization spent five months viewing various vendors and platforms, drawing up a shortlist and making the final selection after a series of in-depth demonstrations.
SureCloud was chosen because of our highly user-friendly technology, ability to interlink a range of different modules to provide a single centralized source of information and controls, and the volume of functions we are able to automate.
Prodigy Finance selected and deployed four applications from SureCloud’s IT risk management, cybersecurity and data privacy management portfolios.
- One single centralised source of information, accessible from anywhere
- Automation of multiple workflows
- A robust security posture
- Experience and support across a broad range of compliance frameworks
- Enabled the creation of a new approach to data processing and mapping from the ground up
- Prodigy Finance can now track and record vast numbers of data requests centrally within the SureCloud platform
Integrated GRC that’s right for you
The apps Prodigy Finance use to streamline GRC
Complaince Management
Manage, continuously test and report on your compliance status
Compliance ManagementRelated Resources
- Compliance
Achieve NIS-2 Compliance with Confidence - Whitepaper
Your essential guide to NIS-2 compliance: navigate key requirements, mitigate cybersecurity risks, and streamline compliance with SureCloud’s powerful GRC platform.
Read More- Compliance
- DORA
Ensure DORA Compliance: Download the Essential Cheatsheet
Download SureCloud’s free cheat sheet on DORA, covering key compliance areas like risk management and resilience testing. Be DORA-ready today
Read More- Compliance
The Guide to Security Compliance Maturity
Download SureCloud’s Guide to Security Compliance Maturity. Discover a proven roadmap to enhance compliance, reduce regulatory risks, and build operational resilience across your organization.
Read MoreExplore more case studies
"SureCloud gave us the flexibility to design our own user journeys and reporting tools."
How Autotrader are automating and streamlining their risk and compliance programs with SureCloud
Read Case Study"It's dynamic and agile — if we want to get a snapshot of risk for a particular department or function, we can."
How Office for Students underpinned their risk management culture with SureCloud.
Read Case Study“SureCloud’s solution has brought a comprehensive clarity to data processing that was impossible to achieve with spreadsheets.”
How Everton FC spend 75% less time documenting their processing activities and data protection impact assessments
Read Case Study