.svg){kind=logo}
iGRC is now generally available, connecting controls, evidence, tests, and requirements to help organisations move towards continuous assurance.
Sydney, Australia – 22 September 2026. 6clicks today announced the general availability of Intelligent GRC (iGRC), the next evolution of its GRC platform for government, defence, critical infrastructure, and regulated organisations. iGRC connects controls, evidence, tests, and requirements to help organisations move from structured compliance towards intelligent, and ultimately continuous assurance.
iGRC builds on a year of research through the 6clicks Ready for Sovereignty programme, bringing together GRC, cyber, risk, AI, government, and critical infrastructure leaders across Australia, Asia, the Middle East, and other global markets.
Across closed-door roundtables, customer sessions, and advisory conversations, one challenge surfaced consistently: organisations could produce policies, frameworks, and audit records, but far fewer could demonstrate that controls were operating effectively when it mattered.
The market described the problem in three words: lag, drift, and false confidence.
- Lag: evidence is collected and reviewed too late to reflect the current environment.
- Drift: systems, controls, and AI models change in production while the documentation stays still.
- False confidence: assurance exists on paper, but cannot always be proven under pressure.
Leaders also made it clear that sovereignty is about more than where data is hosted. It is about whether an organisation can see what matters, interrogate the evidence, and intervene before harm occurs.
Moving up the GRC maturity curve
The research identified four stages of GRC maturity:
- Ad hoc: evidence lives across emails, documents, and spreadsheets.
- Structured: documents, records, and workflows are managed systematically.
- Intelligent: connected data and AI link evidence to controls, tests, frameworks, and requirements.
- Continuous: evidence is collected and evaluated on an ongoing basis, providing a more current view of assurance.
For many organisations, the challenge is moving beyond structured compliance. Adding more automation to disconnected processes does not solve that problem. Controls, evidence, requirements, and testing need to work as a connected system.
That is the shift iGRC is designed to enable.
The foundation for Intelligent GRC
The 6clicks platform is built for government, defence, critical infrastructure, and highly regulated organisations, bringing together:
- Sovereign Infrastructure: deployment architecture designed to give organisations greater control over where their GRC data and intelligence operate, with additional deployment models forming part of the 6clicks roadmap.
- GRC Core: proven governance, risk, and compliance capabilities spanning Hub & Spoke management, Hailey AI, the 6clicks Content Library, assessments, risk, audit, compliance, and third-party risk workflows.
- Intelligent GRC: connected controls, evidence, tests, tasks, and frameworks that help organisations progress from structured records towards more intelligent and continuous assurance.
With iGRC, controls no longer need to sit separately from the evidence used to prove them. Controls, tests, tasks, evidence, and frameworks can be connected in context. Hailey AI can automatically collect and assess evidence against defined validation guidance, cite what it finds, and surface gaps for human review.
Multi-framework alignment also allows evidence and testing to be reused across connected requirements, reducing duplicated assurance work while maintaining traceability.
Test once. Prove across frameworks.
“iGRC is an evolution of the 6clicks platform, not a separate product. We’re connecting the GRC Core customers already rely on with a new intelligence layer across controls, evidence, testing, and requirements. Hailey can do the first pass on evidence, but judgement and accountability stay with people. That combination is fundamental to how we think intelligent assurance should work.”
George Reed, Chief Product Officer, 6clicks
“For years, GRC has been very good at showing what should be happening. The harder question is: can you prove the control is working right now? That question came up again and again throughout our Ready for Sovereignty programme. Intelligent GRC is about closing that gap, connecting evidence, controls, and requirements so assurance becomes more current, defensible, and ultimately continuous.”
Andrew Robinson, Co-Founder and Chief Customer Officer, 6clicks
Research acknowledgement
The Ready for Sovereignty programme included partner contributions through conversations and sessions involving CyberCX, part of Accenture, Synergy Group, Scyne Advisory, Gadget Access, and 3 Lights. Customer Advisory Board discussions included participants from Virgin Australia, CSIRO, Tabcorp, BAE Systems, and Healthcare Australia.
These organisations are recognised for their participation in the research and advisory process. Their inclusion does not imply endorsement of 6clicks, iGRC, or the statements in this release.
iGRC is now generally available to eligible 6clicks customers.
The launch marks the beginning of the next stage of the 6clicks roadmap, as the platform continues to connect evidence, controls, and intelligence to help organisations progress towards continuous assurance.
Level up to Intelligent GRC.
Learn more: www.6clicks.com/intelligent-grc
About 6clicks
6clicks is sovereign GRC infrastructure for government, defence, critical infrastructure, and global enterprises. Founded in Melbourne, 6clicks combines a proven GRC Core, an extensive Content Library, and a deployment architecture designed to give organisations greater control over where their GRC data operates. The platform connects to IT, OT, hybrid, and restricted systems, enables multi-entity management via the Hub & Spoke architecture, and delivers purpose-built GRC intelligence designed for environments where traditional vendors and automation platforms cannot operate.
Media contact
marketing.admin@6clicks.com
