Three tenants, one follow-up process
A state development bank with a strong internal audit function
A central development bank in Germany, with more than 800 employees, and one of the larger regional development institutions in the country. As a regulated credit institution, it operates in a demanding supervisory environment shaped by banking regulation, risk management and the German MaRisk requirements. Internal Audit holds a distinct role here: as an independent assurance function, it assesses how appropriate and effective the governance, risk and control processes are across all business and development areas.
This is how a state development bank brought three functions into one audit system.
One system for all three functions, without their data and permissions running into each other. Internal Audit, ISM and Compliance needed to work separately, yet share the same follow-up.
Two departments without a follow-up tool
ISM and Compliance documented their audits and actions without dedicated software. Neither department had a reliable way to track agreed actions through follow-up. Internal Audit, by contrast, had been working with EE for several years.
One setup, three tenants
Internal Audit had relied on EE for years. On their recommendation, ISM and Compliance extended its use to their own areas. Setting up the tenant separation took little effort and was done together with all three departments. First, the team defined which data and configurations would stay separate and which would be shared. On that basis, development and the administrators set up the three tenants.
One follow-up across all three areas
Today, audits and actions are created and documented end to end in EE. The three tenants share a single follow-up. There, each auditee sees their actions across tenants in one place, limited to what their permissions allow.