C1Risk

Avantages

The ability to connect the various facets of your risk program in one place and in a logical way is simply awesome. It's a tool you can use to identify, measure, control, and mitigate risks all in a linear and consistent fashion. It enables a level of program maturity that was previously out of reach for many organizations.

Inconvénients

I'll get back to you on that one. Thus far, anything I have found missing or lacking is already on their roadmap and soon to be implemented.

Avantages

We are a law firm in our second year of working with CyberOne for ISO Certification, Access Review, and Contract Management. One of the many attributes of this platform is that it has enabled us to manage a variety of projects on a single platform. We are currently in surveillance audits for ISO 27001 certification, our quarterly access review process is automated on CyberOne, we are building a complex contract management program and evaluating further use cases.

Perhaps the biggest benefit to the product is that we have access to the full platform and all modules for a single price, so we can budget effectively and scale our program with CyberOne without any hidden costs or budget surprises. The modules are also all integrated so we connect all of our policies, controls, and ultimately all our risk and compliance in this platform.

Specifically, regarding our compliance and audit needs, the automated evidence collection process in CyberOne has worked really well and helped us expedite our audits. We were able to conduct our audit on-screen with our auditor, using CyberOne. Beyond ISO, CyberOne has also provided us with crosswalks to other frameworks, which they manage and update. It is great to know that we can build our risk register, manage findings and manage third-party risk assessments on this platform. We are excited to see all we can do!

Inconvénients

Because the tool is so robust, early on with the onboarding, I sometimes would find myself on the wrong page - nothing that a little time and familiarizing myself couldn't resolve.

Avantages

Product was easy to set up and use. Compliance and Risk Management modules were heavily used for audit reporting. The CyberOne team provided invaluable advice and support during our ISO 27001 certification process.

Inconvénients

Policy Management is unable to link to official policy repositories.

Avantages

The flexibility, stability and customer service is outstanding. The support provided was top notch

Inconvénients

The software is relatively new so there are still some small things that need to be resolved but the company is highly focused on making it right.