Diligent One

The functional GRC elements which Diligent provides are: Board & Leadership Collaboration, Entity & Subsidiary Management, Diligent Market Intelligence, Enterprise Risk Management, IT Risk Management, IT Vendor Risk Management, IT Compliance, Internal Audit Management, ACL Analytics, and Internal Controls (which delivers continuous controls monitoring, CCM).

Fig 1 – Integrated GRC capabilities within Diligent One Platform

These elements are linked within the Diligent One Platform so that the same data and shared functionality underlies
role-appropriate views of the governance status, risk and compliance situation, and can contribute value across different areas (see Figure 1).

The Diligent One Platform is the foundation for all solution capabilities. It is based on AWS’s technology platform, from which the native infrastructure is used to provide data management, plus many integration features such as common security, and centralised management capabilities for identities/entitlements.

A primary capability of the platform is to enable data integration with any data sources that customers need to incorporate within GRC-related processes. Examples include general ledger, supply chain management, greenhouse gas emissions, HR management, sales commissions management, and sentiment analysis. Over 100 API-level native integrations will be supported, across leading vendor solutions, plus a variety of frameworks, template, content and data feeds.

A Developer Portal will enable clients and well-established partners to build functionality onto, and integrate with, the platform.

Customer Quotes

“Having the ability to streamline data collection, break down siloes and communication gaps and surface clear insights built on reliable, up-to-date risk data is invaluable.”
Simon Owen, Grafton Group plc

“As an audit professional, being able to understand and prioritize key risks that materially impact the organization is crucial… Having an aggregated view of risk, in a program that automates and streamlines tasks, is invaluable.”
Tom Keaton, Crown Castle

Diligent One replaces the legacy, pre-integration products from Diligent, Galvanize, and Steele:

• Diligent Boards
• The HighBond platform (with various GRC capabilities)
• Steele’s Ethics and Compliance Platform.

Fig 2 – Package options for capabilities within Diligent One Platform

Three package options (Essentials; Professional; and Professional Plus) are marketed, each of which incorporates a range of the sets of capabilities within Diligent One (see Figure 2).

As common integration spans all the capabilities, additional choices from the functions available can be added to packaged options, without disrupting implementation technologically.

The development of Diligent One Platform from the company’s legacy solutions is ongoing at the time of writing, and likely to continue throughout 2025. As well as rationalisation and integration throughout, the company plans to incorporate new features extensively, including within the following areas:

• Risk and strategy: Opportunity management, to analyse the positive side of risk; quantitative risk analysis; issue management across the platform; and native support for business continuity and disaster recovery requirements.
• Audit and controls: risk/control self-assessment (RCSA); AI support for audit risk assessment and planning; QA of internal and external audits; support for certifications and compliance questionnaires.
• Ethics and compliance: AI-supported regulatory change management; native third-party management, with enhanced questionnaire support and a vendor portal.
• ESG and data intelligence: sustainability and carbon emissions benchmarking; climate-related scenario analysis; disclosure support for new regional ESG reporting requirements; support for boards wishing for transparency to investors and other stakeholders.
• Board and leadership: additional information for analysis and reporting, including peer and industry insights, news, dashboards, and content, plus alerts and notifications; better information presentation including best-practice templates for board reporting (including highlighted liabilities), plus AI-assisted summarisation of insights and actions from board material.
• Mobile-oriented user experiences, insights and facilities that are role-appropriate, for directors, executives, and risk/compliance practitioners.

Diligent has a significant number of respected partners across four types of commercial relationship (resellers and managed service providers; consulting firms and systems integrators; practice-adjacent technology that extends capabilities and value; and go-to-market alliances including AWS, Moody’s and NYSE).

Diligent is combining a wealth of risk, compliance, audit, ESG, and other capabilities that can link with its board-oriented heritage solution, to offer a singularly extensive range of GRC insight and value. It could reach quite quickly the position of having a fully capable and newly-modernised solution set, with advantages that are the preserve in usual circumstances of a start-up – and yet with a much more solid commercial position and prospect because of its established customer base.

Across the vertical stack of GRC practices that the solutions pertain to (and alongside its product and partnership investments), Diligent invests strongly in supporting and engaging customers via a choice of types of training and advisory content. Combined with in-person customer events, and support for directors to keep up with market changes, these should help to further boost customer value, as well as the cross-selling opportunities that Diligent can realise. We expect to see the company continue its long heritage in the ever-growing GRC market, with greater relevance and appeal than ever to a broader range of users within all types of organisation.