How Dayforce Saves Time by Mapping Multiple Frameworks with CrossComply

In our Spotlight on Success series, Michael Geiger-Wolf, Director of Risk and Compliance at Dayforce, shares how his team has leveraged CrossComply by Optro to save time by mapping controls across multiple frameworks, consolidating requests to reduce stakeholder touchpoints by over 80%, and supporting a growing organization without having to add staff.

Tell us a bit about Dayforce’s Compliance program, and how CrossComply by Optro has helped you save time by mapping controls across multiple frameworks?

Dayforce has been performing client-facing audits for decades, back when they were the SAS 70 audit. Of course, those have now changed to SOC and SSAE 18. We also perform ISO audits, NIST audits, and FedRAMP certifications, as well as a number of locally-required backend taxing authority and payroll audits. 

What we really wanted was a platform that offered workflow, which Optro had. The key difference for Optro was it also offered the ability to create a document and maintain an audit library of our evidence that we were capturing from our control owners. We then use that audit evidence that we captured in Optro and deploy it across the various frameworks so we don’t have to ask control owners multiple times for the same thing. 

Because we’re a fairly mature organization, we had all of our frameworks established and all the controls established as well. We utilize CrossComply within Optro to map the controls across the various frameworks. We’re lucky that the timing worked out and we were able to transition to CrossComply for all of our frameworks and for our client-facing audits. 

What was the Optro adoption experience like for your stakeholders? 

Some of the control owners who work on SOX were already quite used to Optro, and were asking us, “Why can’t you use this tool as well?” We were using a combination of manual requests and SharePoint workflows for a very small amount of things, but the users were asking us to adopt something similar to Optro — so they were obviously very easy to get onto the Optro platform with CrossComply. But those who were new to Optro also found it very intuitive and straightforward, and were very appreciative. 

What has been the biggest ROI for your organization since implementing Optro?

We manage all this with the same number of people while we’re undergoing a significant global expansion. One of the advantages that we saw in terms of costs was that because our auditors were able to reuse evidence, we could now combine a couple audits together. Our Shared Services audit could be combined into one overarching audit, which took 16 touchpoints down to 2 annually for our shared controls. 

Our external audit fees dropped significantly, such that our savings was actually more than what we paid for Optro. 

We’ve certainly experienced lots of benefits on my team, and we’re an organization that’s growing very quickly, adding new frameworks, and expanding globally. We’ve been able to support that growth with our existing staff because we have Optro. 

How has Optro helped you reduce audit fatigue for business stakeholders?

One of the biggest benefits that isn’t financial in nature, but is still very real involves our control owners. They used to always say, “When am I supposed to do my day job?” — they just felt inundated by audit request after audit request. With Optro, we don’t get that anymore — we get timely responses. The workflow makes it easy for them to provide the evidence. 

The way we’ve structured our audits and our evidence library means that in some cases, they put us on a regular distribution list and they don’t hear from us for literally months at a time. Our relationships with our control owners have improved significantly. If you’ve ever been tired of hearing control owners say, “When am I supposed to do my job?” — Optro solved that problem for us.