Controllo Pricing Overview

The biggest value is how everything is connected - controls, risks, evidence, assets. Once you upload something, it’s not just stored, it’s actually mapped properly across frameworks. The dashboards help a lot during internal reviews and board updates. Also the AI engine – Secura , is super helpful and saves my team a lot of time for analysing gaps for ISO 27001 controls. Review collected by and hosted on G2.com.

Initial setup requires some effort, however once that’s done it’s a easy way ahead. Review collected by and hosted on G2.com.

I find Controllo's solution to be incredibly detailed and comprehensive, covering the entire risk and compliance life cycle. I am impressed with its ability to keep up with new regulations and standards, such as the California AI Act and ISO 42,001. The software offers great visuals on status from a client perspective, breaking down specific status sections regarding evidence collection, which I find invaluable. It provides holistic insights into cybersecurity risks, particularly aiding organizations in SOC two, ISO certifications, and CMMC. The tool allows seamless organization and presentation of information to auditors. I appreciate that it's a managed service installed in the cloud, which means no complicated IT setup is required, making it straightforward to deploy. The dashboard and security features are particularly useful, allowing me to track the client's progress and understand the compliance lifecycle more effectively. I value its capability to organize and understand regulations, controls, and necessary evidence for compliance, which greatly supports providing the correct documentation for various standards like CIS, NIST, ISO, and certifications such as SOC two and CMMC. The risk assessment process integrated within the platform adds significant value, helping to organize, understand, and provide the necessary evidence efficiently. Review collected by and hosted on G2.com.

I wish the platform had more capabilities to pull evidence automatically from external platforms. It lacks APIs to collect evidence from cloud services like AWS, Google Cloud, Azure, or Salesforce, which would greatly enhance its functionality. Review collected by and hosted on G2.com.