OneTrust Tech Risk & Compliance Reviews & Product Details

OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies. 

Seller

OneTrust

Discussions

OneTrust Tech Risk & Compliance Community

Solution Type

All-in-One

Overview by

Cheryl Rasmuson

Used by Chata and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

G2 reviews are authentic and verified.

Here's how.

Srinidhi D.

Head-People and Culture

Small-Business (50 or fewer emp.)

2/1/2021

"Smooth, structured and well designed"

4.5/5

What do you like best about OneTrust Tech Risk & Compliance?

The ease of navigation and the structure Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

The awareness module seems very basic. In my opinion, it really is not of much use. Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

We are able to put down better processes for our organization. As a small organization, some of the processes may not be given immediate priority but with TBL, we have been able to get an early headstart. This has helped us streamline and structure a few policies and processes better. Review collected by and hosted on G2.com.

Verified User in International Trade and Development

Small-Business (50 or fewer emp.)

2/4/2021

"Great product that keeps getting better"

4.5/5

What do you like best about OneTrust Tech Risk & Compliance?

I like the service that comes with it. The tools are fantastic, but when I've run into a challenge or had questions, they are so quick to answer and throw resources to help me, even as a smaller company Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

There are some limitations on the way you view the data. The data it holds is quite robust, but you don't always see it where you need to when you need to. The coming dashboards for metrics will help this a lot. Review collected by and hosted on G2.com.

Farnanda W.

Small-Business (50 or fewer emp.)

11/7/2020

"It has a large number of functions and tools"

4/5

What do you like best about OneTrust Tech Risk & Compliance?

It has a large number of functions and tools that are quite useful for regulating data security. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Its interface is not intuitive at all, this makes the whole application quite cumbersome and complicated, its customer service team is the next bad thing, in my experience they took too long to respond, and when it finally got They deigned to give an answer they never gave a correct solution to my problem, their learning is quite problematic, although they have video tutorials and a large number of tools to teach how to use the system, the application is so complicated that it is still virtually impossible learn how to use this application properly. Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

In theory, my idea was to use it to improve the security and way of presenting the data on my web page, after researching everything it looked quite promising regarding the advantages it would have, but in practice it became a complete nightmare, never I was able to use this application in the proper way due to its great complexity, in short I do NOT recommend this application to anyone. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

2/1/2021

"Good product for tracking audits; workflow needs some streamlining."

4/5

What do you like best about OneTrust Tech Risk & Compliance?

Functions that allow centralized management of policies and other aspects that are required for SOC2. Ability to automate evidence collection and reminders to collect manually. Having having a common workspace to work with an auditor through the entire audit process. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Workflow management between evidence requests, task and controls could be streamlined. Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

Managing the processes to achieve SOC2 compliance and efficiently engage with customers looking to gain an understanding of our security posture. Now have single repository for policies and a way to manage updates and schedule reviews, a means to effectively manage the audit process, and a streamlined process to engage with an auditor. Review collected by and hosted on G2.com.

Verified User in Education Management

Mid-Market (51-1000 emp.)

6/22/2021

"GRC platform for Startups"

4.5/5

What do you like best about OneTrust Tech Risk & Compliance?

- SOC2 Readiness Modules and Templates

- Built in Policy and Procedures as per information security standards such as ISO 27001, GDPR etc Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Tugboat is one of the little bit expensive offering Review collected by and hosted on G2.com.

Recommendations to others considering OneTrust Tech Risk & Compliance:

Go to product for startups looking for easy to manage and configure GRC Platform Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

Manage GRC Automations and Internal Audits across the organization. Easy to use and configure platform for small teams. Review collected by and hosted on G2.com.

Verified User in Computer Software

Mid-Market (51-1000 emp.)

5/18/2021

"Security and Compliance Manager"

5/5

What do you like best about OneTrust Tech Risk & Compliance?

A very helpful tool to kickstart a security program, no matter what your current situation is. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Pricing can be a little steep, but you're always able to work it out with customer reps. Review collected by and hosted on G2.com.

Response from Shannon Dougall of OneTrust Tech Risk &...

edit

Thanks for the awesome review. It's much appreciated, and we are happy you find our tool so helpful.

Vladimir V.

Customer Success Manager

Small-Business (50 or fewer emp.)

6/25/2020

"Compliance made easy"

5/5

What do you like best about OneTrust Tech Risk & Compliance?

- Overall time saver especially if you are a small company just starting your InfoSec journey (and you don't have security experts on staff)

- Demystifies the process of setting up a security program

- Selecting pre-canned compliance frameworks (SOC2, ISO etc.) with one click

- Policies and controls created automatically

- Answer client security questionnaires by quickly selecting policies and controls and previously answered questionnaires

- Tugboat is quick to respond to questions and suggestions Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

- Already decent integration list needs expanding

- Some UI quirks need to be ironed out Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

- Any young company is unlikely going to have a full-time security officer on staff. Tugboat provides a true virtual Security Officer.

- Takes the mystery out setting up a security program and getting ready for SOC 2

- Answering client questionnaires is quick and efficient (almost no typing required)

- Policy updates and improvements handled by Tugboat (easy update) Review collected by and hosted on G2.com.

Julia B.

Small-Business (50 or fewer emp.)

6/17/2020

"An amazing support team and a great platform!"

4.5/5

What do you like best about OneTrust Tech Risk & Compliance?

Easy to navigate platform that keeps everything organized for you and the entire team. I like the fact that you can assign roles and responsibilities, forward newly created policies for review, and see the progress of all the tasks and each team member. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Some of the policies and references were very specific to US laws and regulations which do not apply to companies operating in Canada. Review collected by and hosted on G2.com.

Recommendations to others considering OneTrust Tech Risk & Compliance:

- review and assign policies to appropriate team members

- set a goal of how many policies each team member has to review every week

- schedule regular meetings to easily follow up on the progress and address any issue that may arise with the policy review or process implementation

- designate a reviewed for the work that is done on the platform

- connect appropriate Softwares to automate evidence collection

- find an auditor who is comfortable with using the platform Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

Tugboat was able to provide a comprehensive list of policies and controls that were applicable to us in preparation for the certification process, which allowed us to review our current operations and update it accordingly. This approach significantly simplified the process and provided clear guidance for the implementation of appropriate controls. Review collected by and hosted on G2.com.

Verified User in Accounting

Mid-Market (51-1000 emp.)

2/1/2021

"Decent platform that still have lots of room for growth"

3.5/5

What do you like best about OneTrust Tech Risk & Compliance?

I like how modern it looks and how the tugboat team continuously improve its platform to make it easier for users to navigate Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

There is still a lot of room for improvements and sometimes it may seem like Tugboat is not improving fast enough. Sometimes they come up with features that are not as good as the previous ones. Review collected by and hosted on G2.com.

Ryley M.

Mid-Market (51-1000 emp.)

6/9/2020

"We needed help getting policies - Tugboat made it possible."

5/5

What do you like best about OneTrust Tech Risk & Compliance?

Easy to use, and quickly creates policies. Creates SOC2 instantly. Enables regulatory compliance at whatever level you need. Far easier to deal with than any other competitors we researched. Generates policies that have been suitable for a variety of clients: banks, airlines, healthcare etc. Increased accuracy, and consistency on a case by case basis (less customs) Centralized everything for our sales teams to work with. CISO loves having quick access to policies, that are easy to tweak as needed. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Would love a mobile-native client. Can't wait for the RFP section to become smarter and smarter :) Review collected by and hosted on G2.com.

What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?

We needed to create new policies. Tugboat made it happen. Saved us a huge lift on generating these one by one ourselves, and managed it quickly. We have recommended them to other clients. Our compliance process used to be completely manual, when we were dealing with our clients. It was one off by one off -- Tugboat has made it streamlined and easy. We are a decentralized organization -- this helped, as we have lots of institutional knowledge that has to be grabbed on a one off basis - with a huge continuity risk should someone leave the org. Now - this is not a problem. Review collected by and hosted on G2.com.