fullCircle GRC Reviews & Product Details

I've witnessed fullCircle GRC evolve from a modest platform into a robust GRC solution that has transformed our security and compliance program. The standout feature is its user-friendly interface that displays controls on a single scrollable page rather than segregating them into separate modules - this is invaluable for daily GRC operations and sets it apart from competitors who prioritize modular coding over practical usability. The risk register has been instrumental in keeping us organized through numerous internal audits. As a company certified in ISO 27001, 27701, 27017, 27018, and 42001, we've found the ability for risk3sixty to immediately pull evidence for internal audits to be a game-changer. The Jira integration is particularly impressive, allowing our developers and SMEs to submit evidence through a tool they're already comfortable using. Additionally, the ability to duplicate projects year-over-year for external audits has us excited about future efficiency gains. Review collected by and hosted on G2.com.

While implementing the Jira integration, we encountered some bugs that required troubleshooting. The initial implementation process took some time, though this was largely due to our complex compliance landscape with nine frameworks and specialized requirements rather than a shortcoming of the platform itself. Review collected by and hosted on G2.com.

1: Ease of use of the platform: fullCircle is extremely intuitive to use, so it's very easy to get individuals up to speed on how to operate within the platform. This results in significantly less training time / resources allocated toward maintaining the GRC program.

2: fullCircle has many features that allow us to streamline our processes. For instance, we are very easily to link findings from our assessments and vendor reviews into our risk register and track them through completion. This is extremely useful for external audits as we are easily able to demonstrate the source of a risk and how we tracked that risk throughout the entire lifecycle. Review collected by and hosted on G2.com.

N/A - Our team has found fullCircle to be very simple to use and it's been extremely beneficial to our organization. Review collected by and hosted on G2.com.

Full Circle is a well-built platform with all the functionality many GRC programs need.

We can create and track various projects, including vulnerability management and risk remediation. Calendars keep our compliance tasks on track. Policy management functions streamline the drafting and approval process. Vendor management and penetration testing modules are available.

We also use the platform to track assessment (e.g. SOC 2) controls and evidence. Automated follow-ups help keep evidence updated throughout the year. Review collected by and hosted on G2.com.

At the moment, only the automations for AWS are built out. However, automations for Azure and other platforms have already begun beta testing, so this functionality should be available soon. Review collected by and hosted on G2.com.

fullCircle GRC is easy to use. It has a simplified interface and offers great value for money. With different modules available for managing policies, vendor risk assessments, enterprise risk assessments and internal audits, it projects itself as a solution for all your GRC requirements. Additionally, it offers an out-of-the-box customizable inventories module that can be used for multiple purposes. The team at Risk3sixty offered implementation support and promptly responds to any queries. Review collected by and hosted on G2.com.

I have not disliked anything about fullCircle GRC since I started using it Review collected by and hosted on G2.com.

I was one of the original users of FullCircle, when it was still called Phalanx. The platform went from a very basic platform, to a reliable GRC solution that allows for tracking all elements of your ISMS, GRC, TPRM, and more. It provides the ability to customize as much as you'd like, but the out of the box solution has very much all you'll need. Having used a variety of other GRC tools, FullCircle is surely the easiest to implement, which as an Information Security professional, not having to spend a lot of time to implement a new tool is always a positive. Review collected by and hosted on G2.com.

There's nothing that I dislike. There are surely some feature requests we've made, and the FullCircle team is always receptive to that feedback, but those are more nice to have requests, rather than a must have. Review collected by and hosted on G2.com.

excellent usability and customer interface. Robust Risk Register and Personalized customer service. We were able to have the tool up and running in a day. Building the backend processes to support took longer than launching the tool. Review collected by and hosted on G2.com.

some quirky bugs that we've experienced during implementation, mostly around the Compliance Calendar. Review collected by and hosted on G2.com.

We are in the process of using fullCircle to organize our evidence gathering and sharing process and We are in the process of using Full Circle to organize our evidence gathering and sharing process and have found it easy to use. Review collected by and hosted on G2.com.

Sometimes the features did not work the way we wanted them to. But risk3sixty is very good at finding ways to work with us and explain the features further. Review collected by and hosted on G2.com.

It's dynamic and robust interface dashboard helps get real time insights of risk and audit issues, it also helps to keep track of ongoing compliance, tickets resolution and policies changes Review collected by and hosted on G2.com.

It's dashboard has so many features that makes it sometimes complex to understand the ongoing process. Review collected by and hosted on G2.com.

Full Circle GRC’s intuitive interface makes managing compliance easy, with real-time dashboards and customizable workflows. I also value the automated reminders that keep tasks on track and the smooth integration with tools like Microsoft 365. I love how good the customer service is, you guys make sure to go to any length to resolve any issue.Moreover, I use Full Circle GRC frequently, and its real-time dashboards and automated reminders make managing risks and compliance effortless. Review collected by and hosted on G2.com.

One downside of Full Circle GRC is that some features, like reporting templates, feel limited and could offer more customization. Additionally, initial setup can be a bit time-consuming, especially for smaller teams without dedicated IT support Review collected by and hosted on G2.com.

FC is a pretty straightforward GRC package with everything you need to create and implement, or support, your GRC program. I particularly enjoy the ability to link individual items in their corresponding modules (e.g. project task to risk to related control) to show a clear path of the why and how we are doing somehting. While there is room to improve and refine FC (as with evrything), what you get out of the box is pretty awesome. The Risk3sixty team also has a good wiki, excellent support team, and are able to help with your integration. After we implemened FC, we use it regulalrly (daily) for risk management, control reviews, project managegement. The only module we have not dived into is their vendor module. Review collected by and hosted on G2.com.

Some basic functionality that I would expect in a GRC tool is missing:

- Risk policies cannot be centrally managed and updated across your risk registers.

- Tables cannot be created in rich text boxes.

- I'd like to see an approval/signing function for risk items (not just assinged risk owners) for business stakeholders to use. Review collected by and hosted on G2.com.