ATPI Group Case Study
How ATPI streamlined their risk management and achieved ISO 27001 certification with STREAM®.
The ATPI Group is one of the world's leading and long-established global travel management and events businesses. With a footprint of wholly owned offices and network partners in over 100 locations around the world, ATPI boasts market leading travel booking technology, corporate event management skills and specialist knowledge in a variety of sectors.
“We looked for an IRM solution to help us simplify the management of those complicated processes sitting within multiple different systems.”
The story in four lines
Customer
ATPI Group
Use Case
ISO 27001, ISO 45001, ISO 50001, PCI DSS compliance management
What Changed
Centralised compliance, automated workflows, unified risk management across 100+ global locations
Outcomes
ISO 27001 certification achieved, 75% response rate on compliance forms, streamlined global operations
Read this interview with Group Compliance Officer Philip Jeffs to learn why ATPI chose STREAM® to help manage a variety of its governance, risk and compliance (GRC) needs, and to hear about how ATPI's implementation of the STREAM® Webforms application is a particular highlight in this customer success story.
The Challenge
ATPI used a variety of systems and products within the Group to help manage their risk and compliance, and compiling data from all of them was difficult. Each region had found its own solution and centralising was both complicated and expensive, and could also expose them to 'hidden' risks.
They looked for an IRM solution to help simplify the management of those complicated processes sitting within multiple different systems. STREAM® allows them uniformity, efficiency, and a streamlined way of assessing and reporting on their risk.
Doing risk assessments in the same way, globally, across partners and suppliers has helped them not only save time and resources, but also move away from largely paper-based and over-complicated systems and processes with the confidence of a comprehensive, easy-to-understand view of their risk posture.
Selection Criteria and Experience
What was it that made STREAM® stand out over the alternatives you explored?
"I researched IRM solutions in quite a lot of detail, and STREAM® emerged as a favourite due to its affordability, functionality and breadth of use cases, but most of all because of its adaptability to an individual organisation's specific needs.
It was very important for ATPI that the product grow with us, and STREAM® stood out in terms of commitment to continual improvement."
What was your initial use of STREAM®?
"Our initial use case for STREAM® was compliance with ISO 27001, but then we expanded to various other ISO certification models and beyond, such as 45001, 50001, and PCI DSS.
Our Information Security Management System (ISMS) was lauded in the auditing process for ISO 27001 certification, and we are now certified to this Standard with the help of STREAM®."
Benefits
How has the product developed since you became a customer? What benefits have you seen from using STREAM®?
"Since we purchased STREAM®, the product had various significant updates, such as the addition of Webforms, Entities (previously called Events). A particular thing we like is that it's always improving, and it also develops alongside our needs as a client, which is hugely beneficial.
The main benefits of using STREAM® for ATPI have been: centralisation of information, so getting an overview of everything in one place; adaptability - the fact that it isn't difficult to navigate, and very customisable; and that the more you learn about it, and about how to expand the functionality, the better the product gets."
What do you like about Acuity as a business and STREAM® as a solution?
"The best thing about STREAM® is that the product is continually evolving, flexible and customisable in a way off-the-shelf SaaS platforms aren't. Also, the development team seems engaged with the product and are always looking at how to expand its functionality further and provide more value.
Acuity as a business has been extremely helpful, patient and supportive. I particularly appreciate the responsiveness when it comes to requesting support - it rarely takes long to get an answer to my questions about STREAM®."
EASY TO INSTALL AND USE
CUSTOMISABLE
AFFORDABLE
SUPPORT AVAILABLE
RESPONSIVE
“It was very important for ATPI that the product grow with us, and STREAM® stood out in terms of commitment to continual improvement.”
STREAM® Webforms Success Story
Acuity released Webforms and ATPI were one of the first to adopt this capability.
What was the challenge you were looking to solve using STREAM® Webforms?
"By adding Webforms to our use of STREAM®, we were looking to automate the risk assessment process, which was very manual, convoluted and time-consuming. Previously, we had the assets and vulnerabilities monitored, but using Microsoft Forms made it much more difficult to visualise data and report it."
How has Webforms opened up the use of STREAM® across your business?
"We have introduced a Homeworking Webform to cover Health & Safety, well-being, and more. We trialled this with UK homeworkers (175) and had a 75% response rate, which is much higher than we would've otherwise had through methods such as calling employees, which considering the current volume would have been hugely difficult and time-consuming. Using Webforms in this way has also helped us notice and address gaps in our process and systems - for example, the Health & Safety webform picked up a variety of issues regarding insurance.
Using Webforms has also helped me as well as other ATPI regional risk managers automate the reporting process for risks and threats across the Group. The way we achieved this was by designing a webform in STREAM® which provides the opportunity to assess risk (high/medium/low) and has extensive functionality to automate all aspects of the process including reporting."
What are the key benefits of using Webforms?
- Takes away the need for extra resource
- Enables you to be global or regional, 'zoom in and out'
- Customisable - adapts to your needs
“By adding Webforms to our use of STREAM®, we were looking to automate the risk assessment process, which was very manual, convoluted and time-consuming.”
Unify your global compliance management
If you're managing compliance across multiple regions, standards, or systems, STREAM® can help you centralise risk data, automate assessments, and achieve certifications faster.
Acuity Risk Management helps businesses worldwide effectively manage, prioritise and report on their risks to inform strategic decision-making and build long-term resilience.
Its powerful STREAM® platform provides rapid time to value to reassure stakeholders that risks are under control and compliance is maintained with increasingly complex standards and regulations. With STREAM®, Acuity eliminates the guesswork around risk to support strategic decision-making, prioritisation of resources and justification of expenditure to maximise ROI. With customers worldwide, Acuity has proven success supporting customers in highly regulated and targeted industries such as finance, IT, telecommunications, healthcare, defence and government.