IBM OpenPages Features

Identify various risk factors such as the inadequate use of technology, human factor, or external risks.

Ability to classify risks based on risk type, severity, and custom criteria.

Support for various methodologies and frameworks for risk management.

Tracking of various risk indicators including risk metrics, historic trending, metadata & more to gauge the organization's risk posture

Active monitoring of systems, applications, or networks

Tracking of various risk indicators including risk metrics, historic trending, metadata & more to gauge the organization's risk posture

Ability to create and compare recovery plans using standard out of the box templates.

Includes a library of procedures and standard plan templates.

Procedures to implement crisis management plans and actions.

Create, manage and track all task activities and progression

Creation, administration, and evaluation of assessments or tests

Manage risks related to IT systems

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Pinpoint and mitigate risk from third-party vendors and suppliers.

Store, manage, and track all electronic documents in a centralized location

Manage and track all disruptions and incidents

Track and manage adherence to policies for any service, product, process, or supplier

Create, manage, and track policies and procedures within an organization

Ensure internal objectives and compliance with policies are met

Identify, monitor, and assess risks to brands

Store, manage and track all forms in a centralized location

Manage risk that occurs from systems failure or inadequate processes

Create, design and manage workflows for repetitive tasks

Automated handling of non-compliant EDI transmissions.

Identify and respond to unexpected problems or failures (ie. "negative events")

Ability to track and store all vendor-related information, such as contacts, services offered, terms, etc.

Identify and assess hazards to ensure the well-being of employees, assets, and the environment

Manage the risk of both financial and reputational loss resulting from nonadherence to current legislation

Allows vendors to own and update their vendor page with security and compliance documentation to share with customers

Allows companies to assess vendors profiles in a centralized catalog

Offers standardized security and privacy framework questionnaire templates

Offers role based access controls to allow only permissioned users to utilize various parts of the software.

Offers built-in or automated vendor risk scoring

Offers tools to assess fourth parties -- your vendor's vendors

Monitors changes in risk and sends notifications, alerts, and reminders for specific actions including: upcoming assessments, profile access requests, etc

Uses AI to alert administrators to changes in risk scoring through continuous monitoring.

Delivers APIs and standard integrations with other software systems.

Complies with security and privacy regulations and standards.

Allows users to access the software using mobile devices.

Facilitates software configuration without the need for technical experise.

Set up connections to third-party platforms to improve business processes

Assists customes through all the phases of the implementation process.

Provides software users with training courses and learning content.

Delivers customer and technical support, directly or trough partners.

The vendor provides consulting services such as business process reengineering.

Allows users to create programs to deal with potential threats.

Dependency mapping of resources includes what-if scenarios.

Ability to create and compare recovery plans using standard out of the box templates.

Includes a library of procedures and standard plan templates.

Create, manage, and track policies and procedures within an organization

Detailed plan including steps, milestones, assignments, and timeline needed to complete a project, strategy or goal

Notifications can be sent to anyone, not only the users of the solution.

Workflows to assign tasks to users based on their role and the severity of the issue.

Detect (and block) vulnerabilities and threats in your applications based on vulnerability information

Create, manage and track all task activities and progression

Track and manage adherence to policies for any service, product, process, or supplier

Manage and track all disruptions and incidents

Store, manage, and track all electronic documents in a centralized location

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Create, design and manage workflows for repetitive tasks

Identify the impact of threats on various departments or business entities.

Analyse plan characteristics such as completion time or performance.

Provide information on recovery KPIs such as recovery time progress and recovery time actual.

Integrates with Integrated Risk Management software.

Integrates with Disaster Recovery software.

Integrates with Emergency Mass Notification Systems.

Pinpoint and mitigate risk from third-party vendors and suppliers.

Users can assign scores to suppliers based on the estimated risk of doing business with them.

Utilize artificial intelligence to analyze third party risks.

Review vendor contracts and profiles to ensure compliance with regulation and internal policies.

Manage and enforce internal policies related to vendor risk management and controls.

Provide workflows to mitigate risk and escalate issues proactively.

Track vendor performance using supplier data such as a history of transactions and contracts.

Send alerts and notifications when corrective actions are needed to address supplier risk.

Perform ongoing due diligence activities to auto calculate overall risk for each vendor.

Include reporting templates for activities such as audits and vendor evaluation.

Consolidate data from multiple systems that manage supplier information.

Provide a 360 view of suppliers which can be shared with internal or external users.

Allows users to generate text based on a text prompt.

Condenses long documents or text into a brief summary.

Allows users to generate text based on a text prompt.

Use AI to generate content in the form of text, images, videos, etc.

Allows users to generate text based on a text prompt.

Condenses long documents or text into a brief summary.

Use AI to generate content in the form of text, images, videos, etc.

Allows users to generate text based on a text prompt.

Condenses long documents or text into a brief summary.

Use AI to generate content in the form of text, images, videos, etc.

Allows users to generate text based on a text prompt.

Condenses long documents or text into a brief summary.

Automates basic tasks and workflows utilizing AI.

Displays all the changes made during audits, including details such as username, timestamp, or type of change in a centralized repository.

Coordinate and track recommended remediation actions.

Facilitates collaboration between teams and stakeholders through shared workspaces.

Integrates with risk management platforms, GRC tools, and other systems.

Create a targeted plan, schedule resources, and determine long-term goals for the audit process

Customize contracts and forms to collect specific information

Provides checklists

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Provide information on the performance of the audit activities and processes.

Ensures audits are compliant with industry-specific regulations and standards.

Guidelines set by the International Organization for Standardization

Guidelines for conforming to environmental laws, regulations and requirements

Regulations on a company's internal process when dealing with financial reporting

Track and ensure quality of products in accordance with food and drug administration (FDA) act

Enforces guidelines set by the Occupational Safety and Health Administration to remain legally compliant

Receive data and information in real time

Analyze and gain insights into data in real-time

Utilizes AI to summarize security questionnaires.

Automate text responses to common security assessment questions.

Utillizes AI to monitor and report on incidents in real-time.

Support various methodologies and frameworks for operational risk management such as ISO 31000 and COSO.

Ability to classify risks based on risk type, severity, and custom criteria.

Identify various risk factors such as the inadequate use of technology, human factor, or external risks.

Support business continuity plans through integrations with business continuity software, incident response, or controls planning

Reduce risk of legal liability through regulations and standards compliance.

Manage and track all disruptions and incidents

Create, manage, and track policies and procedures within an organization

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Plan and strategize marketing campaigns

Improves performance based on feedback and experience

Makes informed choices based on available data and objectives

Ability to break down and plan multi-step processes

Improves performance based on feedback and experience

Software program that continuously adjusts its behavior based on observed data

Develop potential scenarios to identify risks and opportunities

Anticipates needs and offers suggestions without prompting

Creates or updates business continuity plans by transforming organizational inputs and templates into detailed, customized documents that align with industry standards and regulatory requirements.

Compiles available data into clear summaries and analytical reports that outline what happened, the impact, response actions, and lessons learned after an incident or test.

Securely stores data to prevent data loss or breaches

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Set up connections to third-party platforms to improve business processes

Method used in decision-making that allows businesses to input variables to forecast potential outcomes or possibilities

Checklist to confirm the incident and response.

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Initiate collection and analysis of known risks

Allows communication with customers or users via multiple channels such as phone, email, live chat, etc.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Scenario-based process that test the validity of business continuity plans and procedures.

Observe and track the demand, usage, progress or quality of a system, product, or user

Process of developing business plans for strategies, actions, and goals.

Access software remotely via mobile devices

Investigate and take action at root cause or error in processes to prevent recurring issues

Identify and respond to unexpected problems or failures (ie. "negative events")

Store, manage, and track all electronic documents in a centralized location

Set & manage permission levels based on user roles and restrict access to only authorized individuals

Track and document all activities across devices, networks, and other systems

Store and organize documents in a centralized system

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Create, manage and track all task activities and progression

Create, design and manage workflows for repetitive tasks

Track the status over time for a request, process, asset, or transaction

Observe and track the demand, usage, progress or quality of a system, product, or user

Graphical representation of data

Manage the process of evaluating documents or requests submitted for approval

Store, manage and track all forms in a centralized location

Track and monitor efficient handling of all changes/transitions

Notifying as a warning or reminder of a potential or imminent hazard

Monitor the usage of assets, such as equipment, tools, software, etc., throughout their lifecycle

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Application programming interface that allows for integration with other systems/databases

Analyze potential risks across the organization

Create, manage, and track policies and procedures within an organization

Manage and track all disruptions and incidents

Active reporting of data and metrics

Notifications that are delivered to users as soon as an event occurs

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Systematic evaluation of the security of a company's overall security system and situation

Track and manage adherence to policies for any service, product, process, or supplier

Initiate collection and analysis of known risks

Active monitoring of systems, applications, or networks

Track revisions and updates made to files and navigate between different versions

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

System alerts about the need to escalate an issue or request

Alter the layout and content of reports

Track and report regulatory data to either internal management or external stakeholders

Define levels of authorization for access to specific files or systems

Maintain personal certifications/qualifications

Gauge satisfaction and receive information for improvement and success

Electronic signing method that validates the authenticity and integrity of a digital document

Compliant with HIPAA, which sets standards for sensitive patient data protection

Timed notification for any upcoming task, deadline, appointment, or activity

Predict future data based on historical data sets

Visually identify, define, and map all details and relationships surrounding business process models and elements

Configure existing workflows to meet your organization's needs

Active reporting of data and metrics

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Form predictions based on past and present data/trends

Reporting of risks associated with specific actions, events, or entities

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Application programming interface that allows for integration with other systems/databases

Scenario-based process that test the validity of business continuity plans and procedures.

Classify levels of threat and organize actions based on priorities

Alter the layout and content of reports

A record of all activities within the system, including user access, changes made, etc.

Notifying as a warning or reminder of a potential or imminent hazard

Assess and score risks using risk matrices

Define levels of authorization for access to specific files or systems

Gauge satisfaction and receive information for improvement and success

Graphical representation of data

Store and organize documents in a centralized system

A visual display that uses a color spectrum to show how visitors interact with areas of a web page

Initiate collection and analysis of known risks

Analyze potential risks across the organization

Qualitative or quantitative risk methodology to evaluate the risk for an individual account or portfolio, and identify problems

Manage the process of evaluating documents or requests submitted for approval

Assembly of graphs and charts for visualizing and tracking statistics/metrics

Identify and analyse the reasons behind accidents

Track and document all activities across devices, networks, and other systems

Define and maintain business rules that determine workflow capabilities and criteria

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Import and export data to and from software applications

A set of indicators that tracks the performance of networks, applications, systems, teams, etc.

Systematic evaluation of the security of a company's overall security system and situation

Creation and customization of dashboards

Securely stores data to prevent data loss or breaches

Develop potential scenarios to identify risks and opportunities

Arrange tasks based on the level of priority or urgency

Track revisions and updates made to files and navigate between different versions

Timed notification for any upcoming task, deadline, appointment, or activity

Investigate and take action at root cause or error in processes to prevent recurring issues

Develop potential scenarios to identify risks and opportunities

Track and document all activities across devices, networks, and other systems

Arrange tasks based on the level of priority or urgency

A record of all activities within the system, including user access, changes made, etc.

Assess and score risks using risk matrices

Manage the process of evaluating documents or requests submitted for approval

Alter the layout and content of reports

Predict future data based on historical data sets

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Assembly of graphs and charts for visualizing and tracking statistics/metrics

Graphical representation of data

Reporting of risks associated with specific actions, events, or entities

Track revisions and updates made to files and navigate between different versions

Initiate collection and analysis of known risks

Timed notification for any upcoming task, deadline, appointment, or activity

Analyze potential risks across the organization

Active reporting of data and metrics

Investigate and take action at root cause or error in processes to prevent recurring issues

Application programming interface that allows for integration with other systems/databases

Identify and respond to unexpected problems or failures

Manage the process of evaluating documents or requests submitted for approval

Create, manage, and track all task activities and progression

Collect and track employee or stakeholder acknowledgment of policies and procedures

Condenses long documents or text into a brief summary

Use AI to automatically map controls to relevant regulatory requirements and surface overlaps across frameworks

Create, manage, and track policies and procedures within an organization

Monitor and alert users to changes in laws, regulations, and standards that affect compliance obligations

Map internal controls to applicable regulatory frameworks and standards to identify overlaps and coverage gaps

Generate reports on compliance status, activity history, and supporting documentation for internal or external stakeholders

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Initiate collection and analysis of known risks

Store, manage, and track all electronic documents in a centralized location

Track revisions and updates made to files and navigate between different versions

Gather and organize documentation that demonstrates adherence to policies, controls, and regulatory requirements