G2

Mark B.

Senior Risk Manager

Small-Business (50 or fewer emp.)

10/11/2026

"Consistent Risk and Compliance Management Across the Business"

4.5/5

What do you like best about Drova?

The structure and principles of Drova GRC align well with our risk management framework, and they provide a clear structure and a consistent approach, particularly for users outside of risk management. The breadth of modules, along with the integration between those modules, also complements and supports our operations. Overall, it helps us embed the management of risk and controls, as well as our compliance obligations, into the business—especially in areas where users may not be familiar with some of the more detailed risk management principles. Review collected by and hosted on G2.com.

What do you dislike about Drova?

I recognise that you’ll never get reporting that perfectly aligns with an organisation’s specific needs, but the reporting functionality is solid and reasonably customisable. While much of the data is extracted from Drova GRC, we still manage our own risk dashboards and Board reporting outside the platform. Review collected by and hosted on G2.com.

What problems is Drova solving and how is that benefiting you?

With the increasing focus on operational risk and the management of controls, the controls module—and its integration with other modules, particularly the risk register—provides strong support in this key area. The register module has enabled us to move away from Excel spreadsheets and to integrate registers more effectively into our risk management framework. It also includes functionality to generate date-activated tasks and assign them to individual users, which helps prevent actions being missed or overlooked. Review collected by and hosted on G2.com.