Deloitte, Signal AI, & Unify Today Partner to Create an Enterprise Risk Intelligence (ERI) Solution

Challenge

Why Enterprise Risk Intelligence (ERI)?

“None of us operate in a bubble,” states Michael Rasmussen, GRC Analyst & Pundit for GRC 20/20 Research. The modern enterprise is an interconnected web of processes, systems, and third-party relationships—from vendors to outsourcers. But this complexity has created a critical weakness.

In an era defined by geopolitical volatility, digital dependency, and fragile supply chains, today’s siloed, slow, and reactive GRC approaches are insufficient. The gap between detecting external risk and taking internal action is widening, demanding a fundamental industry shift.

As forward-thinking industry experts, Deloitte recognized that clients need a more holistic, integrated GRC strategy—a vision that goes beyond simple compliance to achieve true resilience. The answer to this demand is Enterprise Risk Intelligence (ERI).

This case study details a powerful collaboration formed to address this need: Deloitte as industry consultants, Signal AI as external intelligence providers, and Unify Today as the GRC platform. Together, they offer a pragmatic, integrated solution that seamlessly connects internal GRC workflows with external, real-time risk intelligence, shaping the future of risk management.

This case study is based on the joint webinar, “How Modern GRC & External Intelligence Shape the Future of Risk,” presented by the partnering organizations, Deloitte, Unify Today, GRC 20/20, and Signal AI.

Objectives

Access to Real-time Insights

To enable proactive action and decision-making instead of relying on lagging, manually captured information.

Improved Performance

To directly link risk information to Strategic Objectives and Key Performance Indicators (KPIs) to identify risk objectives, actions to mitigate, and reduce financial impact.

Bridging Silos

To connect strategic, tactical, and operational risks across departments and organizational levels.

More Transparency

To move beyond a compliance-centric mindset and ensure reliability and a single version of truth across systems.

Data-Driven Decision Making

To use risk data to cut through the noise and identify the right risks early on to steer the business safely through uncertainty and prioritize the most pressing threats.

Cost & Time Efficiency

To implement cost-effective solutions rapidly, overcoming time-consuming and expensive traditional implementations.

Access to Real-time Insights

To enable proactive action and decision-making instead of relying on lagging, manually captured information.

Improved Performance

To directly link risk information to Strategic Objectives and Key Performance Indicators (KPIs) to identify risk objectives, actions to mitigate, and reduce financial impact.

Bridging Silos

To connect strategic, tactical, and operational risks across departments and organizational levels.

More Transparency

To move beyond a compliance-centric mindset and ensure reliability and a single version of truth across systems.

Data-Driven Decision Making

To use risk data to cut through the noise and identify the right risks early on to steer the business safely through uncertainty and prioritize the most pressing threats.

Cost & Time Efficiency

To implement cost-effective solutions rapidly, overcoming time-consuming and expensive traditional implementations.

“The reason why these three organizations came together was actually to provide a platform. I don’t mean a single GRC system—I mean a GRC solution that will enhance performance and actually give you an integrated automated view for real-time information, to ensure you actually make decisions that are data-driven, based on accurate information, and data analytics that tells a story.”

Saret van Loggerenberg, Deloitte

Solutions

A holistic, modern GRC approach requires specific building blocks leveraging expertise, AI, and an integrated platform:

• Subject Matter Expert (SME) Experience: Providing functional and industry-specific risk and control subject matter expertise.
• AI-Powered Intelligence: Delivering credible, trusted, and real-time risk signals by leveraging Artificial Intelligence (AI) to identify, evaluate, and map risk events.
• Flexible Platform: Utilizing a flexible, cost-effective GRC platform with an open API model to integrate internal and external data seamlessly.
• Performance-Driven Approach: Ensuring the strategy is focused on enhancing business performance and organizational integrity, not just compliance.
• 360° Situational Awareness: Continuously sensing and interpreting changes in the internal and external environment to provide a contextualized view of risk exposure.
• Orchestrated Workflow: Routing actions, decisions, and escalations through defined workflows to assign accountability and track progress, transforming intelligence into action.

External Risk Intelligence in Action: Customer Use Case

In this example, a customer came to Unify Today, their preferred GRC platform, looking for a holistic, 360-degree view of their risk environment.

This would include:

• Direct risks to their company
• Adjacent risks affecting suppliers, peers, or vendors, and 
• Wider horizon risks across key locations and markets

From there, Unify Today advised them to integrate AI-powered Enterprise Risk Intelligence (ERI) from Signal AI into the GRC platform. Signal AI ingests approximately 6 million documents daily from sources such as media, social media, and regulatory filings from both public and proprietary data, then applies AI to identify critical risk signals and trends, scoring them by likelihood and impact.  

Via an interactive dashboard, the customer was then able to customize their view and link their internal risk categories with Signal AI’s 15 proprietary external risk events. They could easily map events such as cybersecurity incidents, legal investigations, greenwashing allegations, and air pollution funds back to their internal risk register.

In this case, they aimed to drill down into a specific event: cybersecurity. The system doesn’t just scan for any cyberattack or IT system outage, but cuts through the noise by targeting customers within the industry, market, or specific operating locations.

Rather than painting with a broad brush, this solution monitored signals that were particularly relevant to this company based on the outlined strategic objectives, so they could understand the number of risks associated with each. Now, they could easily quantify their risk portfolio in preferred data visualizations to track and measure internal risk ratings and scores, events over time, interconnect risks, and KRIs such as tolerance, appetite, and more.

Real-time alerts notify the team when risks breach predefined thresholds. Thanks to the risk signals, they are able to monitor, quantify, and prioritize risk categories such as greenwashing allegations and supply chain failures. 

This demonstration takes us through the identification, prioritization, and mitigation of a risk event in the Unify Today platform.

Impact

Integrating external intelligence with internal GRC capabilities drives value across key organizational dimensions:

• Effectiveness: Contextually relevant risk information allows for data-driven decisions and reduces overall risk exposure.
• Efficiency: Automated monitoring and intelligence aggregation save time, reduce manual effort, and improve the speed of insights.
• Resilience: The ability to continuously monitor for “cracks” and developing issues before they escalate into crises.
• Agility: Transforming risk management from a backward-looking function to a forward-looking navigation system that enables better strategic decisions and objective achievement.
• Integrated Risk View: Gaining a holistic, 360-degree, integrated view of the internal risk environment and the external factors that impact it.

“If you don’t have a risk culture embedded in the organization from all the different levels—between those who own the controls, to those who are identifying risk—the success will not be there.”

Wesley Govender, Deloitte