Best Enterprise Risk Management (ERM) Software - Page 2

How Many Enterprise Risk Management (ERM) Software Products Does G2 Track?

Total Products under this Category: 183

Category Stats (Sep 2026)

  • Average Rating: 4.49/5 (↑0.03 vs Aug 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: GlobalSuite (+0.21%) - Among all products in this category, GlobalSuite recorded the largest rating increase compared to last month

Last updated: September 01, 2026

How Does G2 Rank Enterprise Risk Management (ERM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 9,900+ Authentic Reviews
  • 183+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Enterprise Risk Management (ERM) Software

G2 Grid® for Enterprise Risk Management (ERM) Software plotting products by satisfaction and market presence

Highlighted products: Optro, TeamMate, ServiceNow Governance, Risk, and Compliance (GRC), Workiva, Hyperproof, SAP Risk Management, LogicGate, and Onspring.

Underlying data: [Grid® JSON](https://www.g2.com/categories/enterprise-risk-management-erm/grids.json?focus%5B%5D=optro&focus%5B%5D=teammate&focus%5B%5D=servicenow-governance-risk-and-compliance-grc&focus%5B%5D=workiva-workiva&focus%5B%5D=hyperproof&focus%5B%5D=sap-risk-management&focus%5B%5D=logicgate&focus%5B%5D=onspring&segment=enterprise)

Essential ERM

Essential ERM® is an easy and cost-effective web-based risk management tool used by organizations in over 20 sectors and 70 countries. It can be activated, configured and used productively in minutes. You access it through a web browser, and there is nothing for your IT team to install or support. Risk management experience is not required, as the tool guides business users through the risk identification and management process. The tool distributes work among your management team and aggregates input to generate reports automatically. Essential ERM® is easy and intuitive for both users and system administrators. The system follows a practical approach to risk management – providing powerful features and aligning with COSO and ISO risk frameworks, while limiting and/or masking complexity for system users. The system provides dynamic reporting and the ability export data to Excel and other reporting tools.

Average Rating: 4.8/5.0

Total Reviews: 41

How Do G2 Users Rate Essential ERM?

  • Validation Rules: 10.0/10 (Category avg: 8.4/10)
  • Impact Analysis: 9.2/10 (Category avg: 8.4/10)
  • Supplier Scoring: 10.0/10 (Category avg: 8.5/10)
  • Has the product been a good partner in doing business?: 9.9/10 (Category avg: 9.2/10)

Who Is the Company Behind Essential ERM?

Who Uses This Product?

  • Top Industries: Management Consulting
  • Company Size: 36% Large, 33% Medium

What Do G2 Reviewers Say About Essential ERM?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the prompt and helpful customer support from Essential ERM, enhancing their overall experience with the tool.
  • Users find Essential ERM exceptionally easy to use, thanks to its intuitive interface and supportive team.
  • Users find Essential ERM to be a must-have tool for risk managers, providing a clear view of risks effortlessly.
  • Users commend the user-friendly interface and wide range of functionalities in Essential ERM for effective risk management.
  • Users find Essential ERM to be a must-have tool for risk managers, providing clear visibility into risks.
Cons
  • Users find improvement needed in control effectiveness granularity for better assessment and decision-making.
  • Users face document management issues due to the lack of file upload support, relying on SharePoint as a workaround.
  • Users find the inadequate risk management in Essential ERM limits their ability to assess control effectiveness precisely.
  • Users find the limited features in Essential ERM restrict their ability to evaluate control effectiveness thoroughly.
  • Users find the limited functionality in rating control effectiveness frustrating and insufficient for their needs.

What Are Recent G2 Reviews of Essential ERM?

What Are G2 Users Discussing About Essential ERM?

LogicManager

LogicManager is enterprise risk management (ERM) software that helps organizations identify, assess, prioritize, monitor, manage, and report on risk across the enterprise. The platform connects risks with the controls, processes, policies, vendors, and strategic objectives to eliminate "unknown knowns"—critical operational risks trapped in organizational silos, giving leadership a centralized, board-ready system of record to fulfill their fiduciary duties of oversight and protect business performance. LogicManager takes a cross-functional, Program-centric approach to risk management. Instead of restricting collaboration through traditional seat-based pricing, LogicManager licenses distinct risk domains as Programs with unlimited user seats, ensuring that every stakeholder can actively participate in the risk lifecycle to enforce Separation of Duties (SoD) and drive more informed, accountable decisions. At the center of the platform is Risk Ripple Assurance, LogicManager's connected risk model. Risk Ripple maps relationships between risks, controls, processes, vendors, and objectives so teams can see how weaknesses in one area propagate downstream. By integrating with IAM systems via SCIM, this logical graph serves as an active oversight layer to detect accumulated privileges, identify hidden dependencies, and provide a complete view of enterprise risk. LogicManager supports enterprise risk management activities through preconfigured Licensed Programs, including: -Enterprise Risk & Maturity Benchmarking -Risk identification, prioritization, monitoring, and reporting -Internal controls over Financial Reporting (ICFR) & SOX -Third-Party & Vendor Risk Management (TPRM) -Business Continuity (BCP) & Operational Resilience -Policy and Compliance Management -Issue, Incident, and Remediation Management -Cybersecurity, IT Governance, & Security Risk (SOC 2, ISO) -Enforceable Separation of Duties (SoD) & Task Handoffs -Executive dashboards and board risk reporting LogicManager helps organizations move from fragmented spreadsheets to a centralized enterprise risk system of record. The platform synchronizes organizational changes, reassigns orphaned tasks, and flags compliance drifts. This automation can reduce recurring program maintenance cycle times by up to 50% while continuously generating time-stamped proof of due care. The platform also helps organizations build and mature their ERM programs using the LogicManager Risk Maturity Model (RMM)™. Developed by LogicManager in 2006, the RMM™ is the industry's only maturity framework independently validated by peer-reviewed academic research to correlate with a 25% premium in enterprise market value. Through guided onboarding and embedded best practices, organizations can reliably measure progress and prove program value. LogicManager Expert (LMX) provides advanced, context-aware AI guidance based on trusted LogicManager University (LMU) content. LMX acts as a real-time practitioner facilitator, translating unstructured natural-language inputs into structured, policy-aligned risk objectives and routing work through human-in-the-loop, SoD-compliant approval workflows to preserve accountability and program integrity. LogicManager is designed for mid-market and enterprise organizations, particularly regulated, complex, and distributed institutions that require accountability to protect value, prove compliance, and fulfill their board-level fiduciary oversight responsibilities.

Average Rating: 4.2/5.0

Total Reviews: 126

How Do G2 Users Rate LogicManager?

  • Validation Rules: 8.3/10 (Category avg: 8.4/10)
  • Impact Analysis: 8.2/10 (Category avg: 8.4/10)
  • Supplier Scoring: 8.3/10 (Category avg: 8.5/10)
  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind LogicManager?

  • Seller: LogicManager
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    42 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 33% Medium, 24% Large

What Do G2 Reviewers Say About LogicManager?

AI-generated summary from verified user reviews

Pros
  • Users find LogicManager's ease of use exceptional, requiring little training for effective implementation and communication.
  • Users appreciate the intuitive design of LogicManager, making it easy to navigate and efficient for busy professionals.
  • Users value the ease of use and exceptional support from LogicManager, enhancing communication and risk management effectively.
  • Users appreciate the navigation ease of LogicManager, highlighting its simple and straightforward interface for task management.
  • Users value the centralized organization of LogicManager, enhancing communication and collaboration across departments effectively.
Cons
  • Users struggle with the lack of clarity in LogicManager, finding it hard to navigate and access past reports.
  • Users find LogicManager not intuitive, struggling to locate information and create reports effectively.
  • Users find missing basic features in LogicManager, hindering its functionality and user adaptability.
  • Users struggle with the steep learning curve of LogicManager, finding it hard to navigate and create reports.
  • Users feel a significant lack of guidance with LogicManager, wishing for better training and clearer instructions.

What Are Recent G2 Reviews of LogicManager?

NAVEX One

NAVEX One is an AI-powered GRC software platform that unifies your entire risk and compliance program. Powered by Nira, the NAVEX One AI agent, your teams can automate routine work, uncover insights faster and make more confident decisions. When your GRC data lives in disconnected systems, risks get missed, reporting slows down and the value of compliance to your bottom line gets muddied. NAVEX One brings everything together on one GRC platform, on one invoice. Hours saved – Spend more time strategizing and less time on manual tasks and troubleshooting Convenience – Get what you need to manage risk and compliance, without the multi-tool clutter Better experiences – Know every touchpoint with your employees and third-parties reflects your values Risk visibility – Remove uncertainty with real-time regulatory alerts and instant insights into risk status and activity Deeper insights –Make better business decisions by connecting intelligence across your business From solving today’s most urgent risk and compliance problem to building tomorrow’s resilient enterprise, NAVEX One is the GRC software platform that grows with you. More than 88 million employees worldwide rely on NAVEX AI-powered software and solutions for reporting, training, policy management, regulatory change and risk oversight. This global reach powers the world’s largest whistleblowing and case management database – delivering unmatched and interconnected insight that helps organizations benchmark performance and strengthen their compliance programs with pioneering data intelligence capabilities. We proudly serve more than 13,000 customers across 150+ countries, including 77% of the Fortune 100

Average Rating: 3.7/5.0

Total Reviews: 85

How Do G2 Users Rate NAVEX One?

  • Validation Rules: 8.3/10 (Category avg: 8.4/10)
  • Impact Analysis: 8.8/10 (Category avg: 8.4/10)
  • Supplier Scoring: 8.3/10 (Category avg: 8.5/10)
  • Has the product been a good partner in doing business?: 7.3/10 (Category avg: 9.2/10)

Who Is the Company Behind NAVEX One?

  • Seller: NAVEX
  • Company Website:
  • Year Founded: 2012
  • HQ Location: Lake Oswego, OR
  • Twitter: @NAVEXInc
    4,062 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,478 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Hospital & Health Care
  • Company Size: 51% Large, 33% Medium

What Do G2 Reviewers Say About NAVEX One?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of NAVEX One, highlighting its intuitive navigation and helpful resources.
  • Users value the navigation ease of NAVEX One, highlighting its user-friendly interface and straightforward search functionality.
  • Users appreciate the user-friendly interface of NAVEX One, praising its ease of use and navigation.
  • Users value the automation in NAVEX One, significantly reducing manual effort and enhancing compliance management efficiency.
  • Users praise the centralized compliance and risk management features of NAVEX One, streamlining processes effectively.
Cons
  • Users report poor customer support from NAVEX One, facing inconsistent service and difficulty in reaching representatives.
  • Users find the difficult setup for NAVEX One requires significant time and expert assistance, complicating initial use.
  • Users often find NAVEX One expensive, with a complex pricing structure that poses a challenge for smaller businesses.
  • Users find the steep learning curve for NAVEX One challenging, especially during initial setup and configuration.
  • Users find a steep learning curve for advanced features, making initial use of NAVEX One challenging.

What Are Recent G2 Reviews of NAVEX One?

What Are G2 Users Discussing About NAVEX One?

IBM OpenPages

IBM OpenPages is a software designed to centralize siloed risk management functions into a single, scalable GRC environment accessible across any cloud infrastructure. The software provides AI-guided workflows, risk classification suggestions, and real-time virtual assistant support by leveraging an AI-powered engine that reduces the knowledge gap for users across risk and compliance taxonomies. It automates incident reporting and risk mitigation classification and reduces human error by surfacing AI-suggested categories and accuracy checks throughout the user experience. IBM OpenPages addresses the challenge of inconsistent GRC adoption across organizations by promoting a culture where compliance is accessible, inclusive, and transparent for all users regardless of technical background. The software supports enterprise and mid-market organizations in banking and information technology with configurable risk management, compliance monitoring, and audit-ready reporting.

Average Rating: 4.2/5.0

Total Reviews: 66

How Do G2 Users Rate IBM OpenPages?

  • Validation Rules: 8.8/10 (Category avg: 8.4/10)
  • Impact Analysis: 9.1/10 (Category avg: 8.4/10)
  • Supplier Scoring: 8.7/10 (Category avg: 8.5/10)
  • Has the product been a good partner in doing business?: 7.9/10 (Category avg: 9.2/10)

Who Is the Company Behind IBM OpenPages?

  • Seller: IBM
  • Year Founded: 1911
  • HQ Location: Armonk, New York, United States
  • Twitter: @IBMSecurity
    74,660 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    344,328 employees on LinkedIn®
  • Ownership: SWX:IBM

Who Uses This Product?

  • Top Industries: Banking, Information Technology and Services
  • Company Size: 39% Medium, 34% Large

What Do G2 Reviewers Say About IBM OpenPages?

AI-generated summary from verified user reviews

Pros
  • Users value the effective risk management capabilities of IBM OpenPages, improving compliance and monitoring within their organizations.
  • Users value the time-saving features of IBM OpenPages, enhancing workflow efficiency and minimizing mistakes.
  • Users appreciate the automation capabilities of IBM OpenPages, benefiting from smart insights and streamlined compliance processes.
  • Users love the intuitive interface of IBM OpenPages, making it easy to navigate and utilize for effective risk management.
  • Users value the robust security features of IBM OpenPages, enhancing trust during audits and compliance management.
Cons
  • Users find the complexity of IBM OpenPages challenging, leading to a steep learning curve and cumbersome workflows.
  • Users find the high cost of IBM OpenPages to be a significant drawback, affecting overall value and accessibility.
  • Users note the usability challenges of IBM OpenPages, citing a steep learning curve and complex customization processes.
  • Users face a steep learning curve with IBM OpenPages, making usability challenging, especially for new or occasional users.
  • Users find the steep learning curve of IBM OpenPages challenging, especially for infrequent users and report generation.

What Are Recent G2 Reviews of IBM OpenPages?

What Are G2 Users Discussing About IBM OpenPages?

Archer

Archer helps organizations manage risk in the digital era—uniting stakeholders, integrating technologies and transforming risk into reward.

Average Rating: 3.6/5.0

Total Reviews: 17

How Do G2 Users Rate Archer?

  • Validation Rules: 7.8/10 (Category avg: 8.4/10)
  • Impact Analysis: 3.3/10 (Category avg: 8.4/10)
  • Supplier Scoring: 5.8/10 (Category avg: 8.5/10)
  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind Archer?

Who Uses This Product?

  • Company Size: 80% Large, 25% Medium

What Do G2 Reviewers Say About Archer?

AI-generated summary from verified user reviews

Pros
  • Users find the ease of use of Archer particularly beneficial for seamless integration with other software.
  • Users value the easy integrations with other software in Archer, enhancing their overall user experience.
  • Users appreciate the seamless integrations of Archer, finding it easy to use with other software.
Cons
  • Users find the difficult customization of Archer disappointing, as custom designs often lead to frustration.
  • Users note the inadequate reporting features of Archer, which fall short compared to competitors' offerings.
  • Users often express disappointment due to limitations on custom design options that restrict modifications beyond standard features.
  • Users express disappointment with the limited customization options in Archer, hindering personal design preferences.
  • Users find the limited reporting capabilities of Archer insufficient compared to competing products in the market.

What Are Recent G2 Reviews of Archer?

SureCloud

SureCloud is the most intelligent GRC platform, enabling organisations to take centralised command of their risk, compliance and audit activities. Built for established teams managing complex environments, SureCloud offers a single, scalable solution that connects all GRC domains while fostering collaboration across your business units. Powered by event-sourced architecture, SureCloud provides a real-time, intelligent view of every risk so you understand how they have impacted you and what really matters to your business. See how risks evolve, track control performance, and link issues directly to outcomes while AI-driven insights help inform your next steps. SureCloud simplifies GRC complexity through a modular, no-code platform that is easy to configure without developer input. Collaboration is built in from role-based dashboards to automated approval workflows ensuring alignment and accountability no matter the business unit. Whether you are managing ISO 27001 compliance, improving your vendor assessments or driving data privacy, SureCloud gives you confidence to improve your posture and build lasting resilience. Highlights: - The Most Intelligent GRC Platform: SureCloud event-based architecture powers deep insights across your compliance and risk activities, capturing context over time instead of just static snapshots. Unlike other platforms, this enables you to track real changes, drive better decision-making, and gain clarity across your risks, controls, and even third-party interactions. - Clever compliance driven by ready automation: By automating manual human tasks such as evidence collection and controls monitoring, SureCloud dramatically reduces preparation time and ensures continued adherence to frameworks like ISO 27001, SOC 2 and GDPR. Get time back for teams to focus on your more important strategic decisions, uplifted by AI to inform improvements and next steps. - Total collaboration for enterprise success: Operate at scale without reliance on distributed toolsets, people and data by linking entities and projects. Clear task management and staged reviewing create accountability throughout the execution process so you deliver faster and without error, letting you improve your overall risk posture.

Average Rating: 4.2/5.0

Total Reviews: 56

How Do G2 Users Rate SureCloud?

  • Validation Rules: 7.2/10 (Category avg: 8.4/10)
  • Impact Analysis: 8.3/10 (Category avg: 8.4/10)
  • Supplier Scoring: 7.9/10 (Category avg: 8.5/10)
  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)

Who Is the Company Behind SureCloud?

  • Seller: SureCloud
  • Company Website:
  • Year Founded: 2006
  • HQ Location: London, United Kingdom
  • Twitter: @SureCloud
    748 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    64 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Retail
  • Company Size: 58% Large, 30% Medium

What Do G2 Reviewers Say About SureCloud?

AI-generated summary from verified user reviews

Pros
  • Users find SureCloud helpful and user-friendly, with efficient incident logging and impressive reporting features.
  • Users praise the responsive customer support of SureCloud, consistently providing quick and effective solutions.
  • Users find SureCloud to be intuitive and user-friendly, making adoption and implementation a smooth experience.
  • Users highlight the intuitive navigation of SureCloud, allowing quick adoption and seamless implementation across teams.
  • Users appreciate the effective reporting features in SureCloud, finding it easy to log incidents and visualize data.
Cons
  • Users find the interface not intuitive, requiring excessive clicks and complicating navigation and functionality.
  • Users find the limited functionality of SureCloud challenging, particularly with navigation and bulk upload restrictions.
  • Users find the inadequate reporting of SureCloud frustrating, wishing for more configurable and accessible reporting features.
  • Users find limited customization in SureCloud frustrating, as it hampers usability and requires backend support for simple tasks.
  • Users express frustration with limited reporting in SureCloud, preferring more customizable and direct options for data analysis.

What Are Recent G2 Reviews of SureCloud?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated