# Ostendio Reviews
**Vendor:** Ostendio  
**Category:** [Security Compliance Software](https://www.g2.com/categories/security-compliance)  
**Average Rating:** 4.8/5.0  
**Total Reviews:** 40
## About Ostendio
Welcome to the next generation of security. Ostendio is the only GRC (Governance, Risk &amp; Compliance) platform that leverages the strength of your greatest asset. Your people. Ostendio delivers an easy-to-use, cost-effective platform that allows you to assess risk, create and manage critical policies and procedures, educate and empower your people to be secure with security awareness training, and monitor continuous compliance across 300+ security frameworks. With deep customization, advanced intelligence, and flexible controls, you’re always audit-ready, always secure, and always able to take on what’s next. www.ostendio.com.



## Ostendio Pros & Cons
**What users like:**

- Users value the **ease of use** of Ostendio, noting its intuitive workflows and straightforward implementation process. (3 reviews)
- Users value the **cohesive and comprehensive features** of Ostendio, enhancing their security programs effectively and efficiently. (2 reviews)
- Users love the **helpful customer support** from Ostendio, enhancing their experience and implementation success. (2 reviews)
- Users value the **audit efficiency** of Ostendio, effectively managing policy acknowledgment and compliance scores in one place. (1 reviews)
- Users value the **efficient tracking and reporting** of compliance scores and policy acknowledgment in Ostendio. (1 reviews)
- Centralized Management (1 reviews)
- Collaboration (1 reviews)
- Compliance (1 reviews)
- Compliance Management (1 reviews)
- Compliance Simplification (1 reviews)

**What users dislike:**

- Users find the **non-intuitive features** of Ostendio complicate usability, hindering their overall experience with the product. (1 reviews)
- Users find the **interface not intuitive** , suggesting it needs simplification for a better user experience. (1 reviews)

## Ostendio Reviews
  ### 1. Robust, flexible, and powerful GRC Solution

**Rating:** 5.0/5.0 stars

**Reviewed by:** Chris M. | Small-Business (50 or fewer emp.)

**Reviewed Date:** November 14, 2023

**What do you like best about Ostendio?**

Having performed a fairly exhustive due-diligence we settled on Ostendio as the most flexible, comprehensive, and powerful GRC solution.  Each of the modules seemlessly works with the rest, the workflows are clear and intutitive, implementation was easy and straight-forward, and the customer support from Ostendio was, and continues to be, the best.  We have integrated Ostendio with our own cyberCTRL solution (https://cyberctrl.net/) and have deployed it across several clients.  We have never had an issue with Ostendio, and their support from pre-sales to post-implenentation are bar none!

**What do you dislike about Ostendio?**

There is nothing to dislike about Ostendio.  The combinaton of state-of-the-art application wiht the best engineers and support anywhere make it impossible to dislike!

**What problems is Ostendio solving and how is that benefiting you?**

Ostendio is "the" hub when it comes to authoritative information across our client universe.  It is the platform of choice in ensuring compliance, responding to audits quickly and effectively, and its unique framework crosswalk has proven indespensible in our ability to help our clients become certified across multiple standards.

**Official Response from Miranda Elliott:**

> Thanks for your review Chris! We are glad that the Ostendio platform meets your needs and supports your business.  We continue to strive to be the platform of choice for Serious Security Professionals.

  ### 2. Using Ostendio to perform assessments

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Consulting | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 25, 2024

**What do you like best about Ostendio?**

Ostendio makes it easy to organize your data, projects, and clients.

**What do you dislike about Ostendio?**

I wish Ostendio could automatically convert the data collected into visually stimulating visual deliverables

**What problems is Ostendio solving and how is that benefiting you?**

It helps me organize the data that needs to collected and it helps the clients and I stay on top of their tasks

**Official Response from Miranda Elliott:**

> Thanks for your review! We're glad that the Ostendio platform is helping you organize data, projects, and clients. 

Thanks also for the feedback about data visualization. We are improving the data visualization within our platform and recently released enhanced reporting features within our assessment module, which we are extending to the rest of the platform.  You'll also see that we are continuing to add more default analytics and reports, and we have a new generative AI reporting tool in the pipeline.
  
Your partner account manager or our CS team will be happy to talk to you about any of these developments. Thanks for being an Ostendio Partner!

  ### 3. Ostendio delivers value.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Stephen C. | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 12, 2023

**What do you like best about Ostendio?**

Multi-framework assessments shortens time spent assessing and give you more time to manage risks.

**What do you dislike about Ostendio?**

A little learning curve but the platform is very intuative and easy to learn.

**What problems is Ostendio solving and how is that benefiting you?**

Bringing together assessment to complaince.  It helps flesh out a security program, giving the user the actionable means to garner support and measure the level of compliance with security initatives.

**Official Response from Miranda Elliott:**

> Thanks for your review Stephen!  We're glad you found the platform to be intuitive and easy to learn. Clients love the clear dashboards showing their compliance at a glance.  Feel free to reach out to the Client Success team if you have any questions.

  ### 4. Multi-faceted Compliance Information Assurance Tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Aaron O. | Chief Compliance Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 16, 2021

**What do you like best about Ostendio?**

The ability to assign and track policy acknowledgment and provide a compliance scorecard for multiple regulatory requirements all under a single reposoitory

**What do you dislike about Ostendio?**

Individual and customized ways to accomplish any one task, allows for quick adoption and usability

**Recommendations to others considering Ostendio:**

MyVCM has a lot of features that start from day one and continue as your company grows in the number of compliance/regulatory projects and size, invest a little time in exploring its features, and it will pay dividends in the short term

**What problems is Ostendio solving and how is that benefiting you?**

Managing regulatory compliance documentation, keeping track of required audit tasks and uploading associated evidence

**Official Response from Miranda Elliott:**

> Thanks for your review! We're happy that you are finding the Ostendio platform useful for your compliance program. We are always adding new features and welcome customer feedback. Feel free to reach out to your CS Manager if you have any questions.  Thanks for being a valued customer!

  ### 5. Very helpful website for training and initiatives

**Rating:** 5.0/5.0 stars

**Reviewed by:** Luke E. | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 17, 2023

**What do you like best about Ostendio?**

I like having all of our primary training and IT related functions all in one site

**What do you dislike about Ostendio?**

Honestly, I don't have any dislikes about the site - works great from POV

**What problems is Ostendio solving and how is that benefiting you?**

I'm a user of the platform, so from my perspective, the platform helps to solve the challenge of solving for our audit and IT security tasks

**Official Response from Miranda Elliott:**

> Thanks for your review Luke!  We're happy that you are finding the Ostendio platform helpful for your audit and IT security needs.  We are always working on new features and upgrades so if you ever have any questions or suggestions please contact your Ostendio Client Success team!

  ### 6. Ostendio has been a great time saver for completing regulatory self-asessments.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Insurance | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 11, 2023

**What do you like best about Ostendio?**

The ability to use an already completed assessment for 1 regulatory body and automatically map it to assessments for other regulatory bodies. We compared Ostendio to other products and chose Ostendio because of its capabilities and ease of use.

**What do you dislike about Ostendio?**

Documents reviewed in Ostendio shows changes marked.  After the document is fully approved, it still indicates that changes were not accepted. The document also does not show the changes until I press the document's "Edit" button.

**What problems is Ostendio solving and how is that benefiting you?**

I used to dislike the document basic/feature-less version of Word used by the platform. I previously brought it to Ostendio's attention, and I am happy to see that a more robust version is now included.

**Official Response from Miranda Elliott:**

> Thanks for your review! We're so glad you are using the Crosswalk feature that allows you to map evidence from one regulation or framework to another. It is a significant benefit to many of our customers in their compliance activities. At Ostendio, we seek continuous improvement and are committed to listening to customers and, where possible, making meaningful changes based on their requests. Please reach out to your client success manager if you have any suggestions.

  ### 7. Ostendio has been nothing short of amazing!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** August 29, 2023

**What do you like best about Ostendio?**

I love how easy it is to navigate around the site. I never have to worry about missing trainings. Everything is so clearly laid out!

**What do you dislike about Ostendio?**

I don't see anything wrong with this platform. I enjoy it.

**What problems is Ostendio solving and how is that benefiting you?**

It is helping me become a better employee. The trainings I take are super informative and helpful.

**Official Response from Miranda Elliott:**

> Thanks for your review!  We're glad you find Ostendio easy to use and love our easy-to-navigate dashboards.  Your client success manager is ready to help if you ever need assistance. Thanks for being an Ostendio customer!

  ### 8. Ostendio's MyVCM helps make preparing for security audits much easier

**Rating:** 5.0/5.0 stars

**Reviewed by:** Brett W. | National Partner, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 01, 2022

**What do you like best about Ostendio?**

MyVCM doesn't just try to check boxes for your security audit. MyVCM actually helps you create a security program along with preparing you for your audit. As a security auditor, I really like the interface and the ability to easily get to the information we need for the audit. In addition, we are able to actually rely on the APIs and other information that we receive for the audit as we understand where the data is coming from and we can verify the completeness and accuracy of those APIs.

**What do you dislike about Ostendio?**

The MyVCM tool does not implement itself. While I actually view this as a good thing, many of the products in the marketplace make claims that you can implement their software and/or prepare for an audit in days or weeks. In reality, implementing a strong security program for your company is not easy but MyVCM makes the process repeatable and includes everything you will need for an audit. In addition, MyVCM helps you implement leading practices for your security program which is, in my opinion, more important than trying to pass an audit. The security audit is just evidence that you have a strong security program. It is not meant to be your security program.

**What problems is Ostendio solving and how is that benefiting you?**

Ostendio's MyVCM is attempting to help companies implement a strong security program along with help streamlining various security audits that the company might need to complete (e.g., SOC 2, ISO 27001, PCI DSS, HITRUST, etc.). At Aprio, we perform security audits for all types of companies using all types of security software solutions. We really like MyVCM as the interface is very easy, and we are able to rely on the APIs. As a security auditor, we cannot just assume the security software is providing accurate information without understanding how the APIs work. Many software vendors do not provide the API calls, and therefore, it is very difficult to know if the APIs are effective or just as importantly have the APIs been changed and why. When our client leverages an API from MyVCM, Aprio knows that it is accurate, and we can easily run audit checks on those APIs to confirm they are working as intended or identify when they have changed.

**Official Response from Miranda Elliott:**

> Thanks for your review Brett!  Auditors love our platform because they can communicate and collaborate easily with clients. We are glad it is making your life easier!

  ### 9. Everything you could want from a partner and GRC platform

**Rating:** 5.0/5.0 stars

**Reviewed by:** Michael  D. | Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 12, 2022

**What do you like best about Ostendio?**

MyVCM helped our very small security team get organized for our first SOC 2 certification. It gives us a source of truth for all things compliance and streamlined our onboarding/offboarding procedures, access requests, and change requests. Their professional services also did a wonderful job helping us leverage the platform and kept us on track - providing guidance, project management, and always pleasant interactions.

**What do you dislike about Ostendio?**

There are small usability features that could use some tweaking, but they are a small team and are constantly improving the product just like any other company.

**What problems is Ostendio solving and how is that benefiting you?**

They helped our very small security team stay organized and reach compliance. At this point, MyVCM is so built-in to our procedures and contains so much evidence for our audits, that we can't imagine not having it. Their assessment module also provides auditors with a streamlined way of obtaining and reviewing our evidence.

**Official Response from Miranda Elliott:**

> Thanks for your review and congratulations on your SOC 2! Ostendio Professional Services loves helping clients meet their data security and risk management goals.  If you have any suggestions for improvement please share with your Client Success Manager. We love customer feedback!

  ### 10. Good experience with Ostendio

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** June 22, 2023

**What do you like best about Ostendio?**

Good experience with Training module all module never user yet. with certificate very nice and all filter in every grid.

**What do you dislike about Ostendio?**

i don't think any dislike causes overall user experience feel good.

**What problems is Ostendio solving and how is that benefiting you?**

for providing training and with certificate.

**Official Response from Miranda Elliott:**

> Thanks for your review! We are glad that you enjoyed the training and we hope you get to use the other modules for your security and compliance needs. Remember that your Client Success Manager is always available to help if you have any questions.

  ### 11. it is good

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 11, 2023

**What do you like best about Ostendio?**

the concept of ostendio is very good and it is intresting

**What do you dislike about Ostendio?**

nothing to dislike in ostendio .everyhting is good

**What problems is Ostendio solving and how is that benefiting you?**

we can learn about corporate security

**Official Response from Miranda Elliott:**

> Thanks for your review! Ostendio is happy to work with serious security professionals who understand the importance of building a culture of security and a robust compliance program.  Please reach out to your Client Success Manager if you have any questions as you delve deeper into all the modules offered by Ostendio.

  ### 12. Amaing Experience with Ostendio

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 22, 2022

**What do you like best about Ostendio?**

It provides critical support for our risk management domains.The people and company culture behind MyVCM played a big roll developing my program from scratch and teaching me how to run a "real" security program.

**What do you dislike about Ostendio?**

The user interface could be simplified and tuned. other than that everything is good.

**What problems is Ostendio solving and how is that benefiting you?**

MyVCM also has annual risk assessments that allow us to review our security program. The Ostendio MyVCM, along with their professional services helped to gain insigts about company policies and compliance with ease.

**Official Response from Miranda Elliott:**

> Thanks for your review! We're happy you are having a great experience using the Ostendio platform and working with our experts on the Professional Services team. We're always open to feedback that will make the platform easier to use for all our clients - feel free to reach out to your Client Success Manager with any comments.

  ### 13. A very powerful tool, in which you can have great advantages for your company

**Rating:** 5.0/5.0 stars

**Reviewed by:** Marcos A. | IT Security Analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** October 10, 2022

**What do you like best about Ostendio?**

It helps us to organize the requirements made by audit. To keep track of those documents that require regular updates. Send questionnaire  to supplier for PCI compliance, etc.

**What do you dislike about Ostendio?**

Honestly, I haven't found anything to dislike about the tool. I am very happy with the use of the tool

**What problems is Ostendio solving and how is that benefiting you?**

Send PCI compliance questionnaire to external providers.

Assignment of updating documents on a  regular  basis, to be prepared for future audits. Help us organize and carry out better Audit control

**Official Response from Miranda Elliott:**

> Thanks for your review Marcos!  We're glad you are finding the Ostendio platform beneficial to your work as you organize for an audit. Customers love the ease of tracking documents and gaining document approvals for audits using Ostendio.  Let us know if we can show you some of the other features of the platform. Your Client Success Manager will be happy to help!

  ### 14. Easy to use

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 31, 2023

**What do you like best about Ostendio?**

Ostenido is easy to use. All the documents are listed clearly under HOME, and they are easily accessible.

**What do you dislike about Ostendio?**

Nothing at the moment. Everything works well for me on Ostenido.

**What problems is Ostendio solving and how is that benefiting you?**

N/a

**Official Response from Miranda Elliott:**

> Thanks for your review! We're glad you find our platform easy to use.

  ### 15. Ostendio is a must for compliance documentation

**Rating:** 5.0/5.0 stars

**Reviewed by:** Aaron I. | Director, IT Security, Enterprise (> 1000 emp.)

**Reviewed Date:** September 23, 2022

**What do you like best about Ostendio?**

One location for all documentation. Easy and intuitive when assigning tasks to team members.

**What do you dislike about Ostendio?**

No dislikes. This has been a great win for us.

**What problems is Ostendio solving and how is that benefiting you?**

Tracking tasks and documentation time has been cut down dramatically. This allows our team to complete tasks quicker when working with our IT and Compliance teams

**Official Response from Miranda Elliott:**

> Thanks so much for your review!  We are happy that the Ostendio platform is helping with your documentation and task management.  If you have any questions our Client Success team is always there for you!

  ### 16. Detail oriented, well-operationalized HIPAA solution that allows me to sleep well at night

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** September 19, 2022

**What do you like best about Ostendio?**

A great platform that is comprehensive and well thought-out coupled with services that are necessary to get a compliance program up and running when you're short-staffed.

**What do you dislike about Ostendio?**

Not having compliance staff, I needed someone with compliance technical expertise. Ostendio was able to provide that service, and it is excellent, but it costs some dough.

**What problems is Ostendio solving and how is that benefiting you?**

Ostendio is helping us build the systems and processes we need to function confidently within HIPAA guidelines, confidently manage PHI, and robustly sell our services.

**Official Response from Miranda Elliott:**

> Thanks for your review! Ostendio offers access to over 150 compliance frameworks, including HIPAA, so you're always operating in line with your chosen framework or regulation.  Our Professional Services team is always ready to help with expert advice and we are glad you enjoyed working with them. 

  ### 17. Pretty straighforward

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Medical Devices | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 14, 2022

**What do you like best about Ostendio?**

In my case, It's a tool that helps me with many tickets at week, and I use it like a gatekeeper to ask for authorizations needed to perform certain tasks

**What do you dislike about Ostendio?**

It would be better if you add some integrations with other agile platforms (if you don't have these kind of features yet)

**What problems is Ostendio solving and how is that benefiting you?**

Like I saw before, ostendio helps me a lot by giving ownership to critical tasks and organizing scheduling between different teams

**Official Response from Miranda Elliott:**

> Thanks for your review!  We're glad the Ostendio platform is helping you to streamline your data security program.  There are many modules and features including access to over 150 frameworks and regulations. Your Client Success Manager will be happy to talk to you about any integrations you would like to see in the future. 

  ### 18. MyVCM and Ostendio is the Winning Combination

**Rating:** 5.0/5.0 stars

**Reviewed by:** Richard  G. | VP IT Operations/Security, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 05, 2022

**What do you like best about Ostendio?**

A single platform to house all your SOC2 audit data

**What do you dislike about Ostendio?**

Like any tool, it does so much, it takes time to learn how feature rich it really is

**What problems is Ostendio solving and how is that benefiting you?**

On-boarding and off-boarding of employees
Vendor Reviews
Asset management
SOC Audit Artifacts
Security Policies and procedures
Change Management

**Official Response from Miranda Elliott:**

> Thanks for your review Richard!  We are so happy that you are using MyVCM for your SOC 2 audit.

  ### 19. Very useful platform!

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** March 18, 2021

**What do you like best about Ostendio?**

An easy way to get organized to meet our SOC2 readiness. I love that we have access to a large number of templates to get us going, we can organize our documents, create audits for some internal processes, track our training requirements, tie pieces of evidence to the appropriate requirements, and many more functionalities!

**What do you dislike about Ostendio?**

I find the tool is not always user-friendly. For example, the integration with KnowBe4 to MyVCM still needs some fine-tuning IMHO: 
- Having to use a "quiz" for users to upload evidence of training completion in KnowBe4 is clunky and often results in the wrong piece of evidence being uploaded. 
- In turn, there is no way for an admin to reject that evidence, so a ticket must be created to resolve the issue. 
- Adding to this, the actual training process could still be incomplete in KnowBe4, but the user can upload any document in MyVCM and it will appear as compliant! 
- It is also very time-consuming to have to set up training campaigns in both platforms rather than have them carry over from KnowBe4.

To avoid all the above issues, it would be a lot more efficient to have a better integration between MyVCM and KnowBe4 so that the user training information gets carried over to MyVCM automatically.

As a separate note, it would be helpful for MyVCM/KnowBe4 to have a chat support option. It's frustrating and not very helpful to send an email and get a response 2-3 days later, if not longer.

**Recommendations to others considering Ostendio:**

Ostendio MyVCM is not perfect. There is no Chat Support, but once you get a hold of the customer success team, they are extremely helpful and willing to go the extra mile to help solve any issues that we encounter.

**What problems is Ostendio solving and how is that benefiting you?**

SOC2 Compliance Readiness. 
Using one central system to maintain compliance evidence.

**Official Response from Miranda Elliott:**

> Thanks for your review and we're glad you found MyVCM useful in preparing for your SOC2.  We just launched MyVCM 3.0 and I'm sure this will make that process even easier for you.  

With regard to KnowBe4 integration, we have raised this issue with them and are pushing them to provide us with a more seamless experience.  They have this limitation with all their partners but we are discussing how we can at least automate the training completion part.  

And you'll be happy to know that a general platform chat feature is being launched on MyVCM next month - so please watch this space!  

Thank you again for taking the time to leave an honest review.  I hope you will leave another review once you have experienced the enhancements of the new MyVCM 3.0.

  ### 20. Most Comprehensive GRC Tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 12, 2022

**What do you like best about Ostendio?**

Ostendio MyVCM provides an efficient and streamlined method of managing Third-Party Risk and performing assessments.  You can finally move away from spreadsheet questionnaires to send to your suppliers and vendors.  All of our vendors have provided feedback stating that our new questionnaires/assessments are the most efficient method they've seen.  
Ostendio's professional services are by far superior to any other I've worked with.

**What do you dislike about Ostendio?**

Better integration of the LMS system would be helpful.  Other than that, they provide everything a company needs.

**Recommendations to others considering Ostendio:**

Whether you are a new startup or a seasoned enterprise, Ostendio MyVCM can support all of your needs.  Everything from GRC, TPRM, Attestation tracking, Policy Distribution Management, and Risk Automation needs.  I've tried over a dozen other products over the past year, and Ostendio has come out on top in every category.  They are also very affordable in comparison to other products.  You will not find a better support team to step you through the process from beginning to end.

**What problems is Ostendio solving and how is that benefiting you?**

Vendor Management, Risk Management, Framework Mapping.

  ### 21. Amazing platform to track our compliance training.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 20, 2022

**What do you like best about Ostendio?**

It helps us to easily track the compliance.

**What do you dislike about Ostendio?**

So far, there is no downside in the application.

**What problems is Ostendio solving and how is that benefiting you?**

From business point of view, it manages the time of the employees by tracking the compliance in a easy manner.

**Official Response from Miranda Elliott:**

> Thanks for your review!  We are glad the efficiencies of the Ostendio platform are helping with your compliance program.  With Ostendio personalized prompts, simple workflows, custom dashboards, and continuous monitoring your team is always aligned and always managing security and risk.  #EveryoneSecure

  ### 22. Consultant

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Public Relations and Communications | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 16, 2022

**What do you like best about Ostendio?**

It is very user friendly, easy to manevers

**What do you dislike about Ostendio?**

Constantly having to do this however I am happy to be near

**What problems is Ostendio solving and how is that benefiting you?**

allowing me to stay in compliance

  ### 23. Sr. Dir. Security and Compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 06, 2022

**What do you like best about Ostendio?**

The ability to manage security actions and audits in one location.

**What do you dislike about Ostendio?**

I am struggling with the Risk Module; it is challenging when creating mitigation tickets and when I close them, the score does not seem to be affected by the increased controls.

**What problems is Ostendio solving and how is that benefiting you?**

Keeping track of tasks due, on the horizon and past due.

**Official Response from Miranda Elliott:**

> Thanks for your review! We are glad you enjoy the ease of use for your security actions and audits. Please reach out to your Client Success Manager who will be happy to discuss the Risk Module with you.  We welcome customer feedback!

  ### 24. Great tool for documenting your security program and complimenting your SIEM

**Rating:** 5.0/5.0 stars

**Reviewed by:** James M. | D, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 17, 2021

**What do you like best about Ostendio?**

The centralized assessment module allows for seamless collaboration with third parties and vendors as well as internal stakeholders by removing emails, attachments and versioning. We use the Documents and Training modules to send out documents requiring acknowledgment and self-paced trainings ideal for our remote environment.

**What do you dislike about Ostendio?**

The platform can be a little slow at times and require a fair amount of resources. We've has some vendors experience confusion establishing accounts and starting assessments.

**What problems is Ostendio solving and how is that benefiting you?**

Remote onboarding by distributing our employee handbook for digital acknowledgment as well as our security awareness training saves both HR and IT time and resources. Collaborating remotely on vendor assessments has saved us a lot of time by moving us away from email threads and documents/spreadsheet version histories.

  ### 25. Very user friendly and delightful

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.)

**Reviewed Date:** October 28, 2022

**What do you like best about Ostendio?**

training which we getting with detail manner with good UI experience.

**What do you dislike about Ostendio?**

not such anything till now i experienced .

**What problems is Ostendio solving and how is that benefiting you?**

no such any.

**Official Response from Miranda Elliott:**

> Thanks for your review! The Ostendio training module means you can empower your people to be secure with scheduled security and compliance training supported by notifications and acknowledgments.  Your Client Success Manager can show you all the other modules to help with your data security program.  Thanks for using Ostendio!

  ### 26. I enjoyed all of the videos and content of training for my workplace.  Very easy to learn!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Maribel A. | Spanish customer care, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 11, 2022

**What do you like best about Ostendio?**

I was able to retake a test when needed.

**What do you dislike about Ostendio?**

There was no downside using this product.

**Recommendations to others considering Ostendio:**

This is a great product to use for easy learning at your fingertip.

**What problems is Ostendio solving and how is that benefiting you?**

any new updated information of my company, I can easly learn thru MYy VCM.

  ### 27. Inherited MyVCM and now recommend to others

**Rating:** 4.5/5.0 stars

**Reviewed by:** Colin D. | Principal Managing Partner, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 29, 2021

**What do you like best about Ostendio?**

The Ability to only use part of the solution and still be worth the investment. We use the Documents and Audit portions daily and have other solutions for ticketing, training, and Assets - still perform as we need.
Support! The support team is one of the best encountered and a big part of why I have recommended the product to other business friends looking for this solution.
Third-party assessments

**What do you dislike about Ostendio?**

Some crosswalks are missing. Most improvements or connectors are only available in the premium package.

**What problems is Ostendio solving and how is that benefiting you?**

Document versioning and approvals, auditing recording, and evidence collection

  ### 28. MyVCM as a functioning QMS

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 16, 2021

**What do you like best about Ostendio?**

Document storage and controls, Audit processing and alerting, secure environment.

MyVCM has helped us build a functioning quality management system.  My organization is in a unique business space with limited regulatory requirements, but we want to improve our internal processes.  MyVCM provides us the options to create a robust QMS that meets our needs.

**What do you dislike about Ostendio?**

The alerting does not allow for customization.  This is a big limit for us as some documents or processes will take many weeks or months to work while others only take days.  Being able to customize the alerts for a specific task during initial setup would be helpful.

The second is the lack of a calendar view.  The homepage provides a list of pending tasks, but it is challenging to forecast future work and take action from one place.

**Recommendations to others considering Ostendio:**

The best thing I can say about Ostendio and MyVCM is the ongoing support I get from Connor.  They have been great about providing detailed training and ongoing support.  This level of support is such a rare thing in software these days.  Having a direct line for expert help is indispensable. 

The software meets our needs and Ostendio is good about updating the platform with improvements to make our work easier or more effective.

**What problems is Ostendio solving and how is that benefiting you?**

As my organization grows we need to develop more consistent workflows and to better manage our legal agreements.  MyVCM allows our QMS to respond to the growing needs of the organization without forcing a specific ISO or other framework.  The structure allows us to upload work instruction, SOPs, policies, and other documents and then setup associated audits of those processes.  This has been very helpful as we grow our company size and onboard new employees.

  ### 29. Comprehensive Compliance Management

**Rating:** 4.5/5.0 stars

**Reviewed by:** Alec Z. | Board Member, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 31, 2021

**What do you like best about Ostendio?**

Ostendio MyVCM covers everything you need as an organization that must comply with government regulatory frameworks like HIPAA. It's detailed, and Ostendio staff is helpful with configuration and ongoing use of the system, training our users and our administrators to get the most out of the system and prepare for thorough third-party assessments like HITRUST.

**What do you dislike about Ostendio?**

The platform can be a bit slow to load when transitioning to a new page, which gets frustrating when trying to move through lists of tasks quickly.

**What problems is Ostendio solving and how is that benefiting you?**

MyVCM allows us to collect all of our compliance information in one place so that we can easily provide evidence to third-party auditors in order to pass assessments.

  ### 30. The onboarding process was simple and straight forward

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 17, 2022

**What do you like best about Ostendio?**

How easy the system was to navigate when I did my training

**What do you dislike about Ostendio?**

I honestly did not dislike anything. Anything that is simple makes me happy

**Recommendations to others considering Ostendio:**

Go with MyVCM

**What problems is Ostendio solving and how is that benefiting you?**

The benefits in the process is knowing how far along you are in the tasks you have to finish

**Official Response from Miranda Elliott:**

> Thanks for your review! We are glad you find Ostendio MyVCM easy to navigate and use.  

  ### 31. The application was easy to navigate and comprehensive.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Ashleigh Z. | case investigator, Enterprise (> 1000 emp.)

**Reviewed Date:** March 02, 2022

**What do you like best about Ostendio?**

I like receiving notifications about my current compliance status, this way I will not overlook completing a pending module.

**What do you dislike about Ostendio?**

No dislikes at this time. I am satisfied with the product.

**What problems is Ostendio solving and how is that benefiting you?**

Ensuring HIPAA compliance.

**Official Response from Miranda Elliott:**

> Thanks for your review!  We just launched MyVCM 3.0 with feature enhancements that make it even easier to use.

  ### 32. Solid, evolving product in an industry NEEDING automation.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jim N. | Director of IS, Small-Business (50 or fewer emp.)

**Reviewed Date:** March 18, 2021

**What do you like best about Ostendio?**

1) Flexible document storage with versioning for policies, procedures, etc. that need to be reviewed annually.  Can be either stored on the platform itself or you can store a 'pointer' to the document (a URI) for on or off-prem repositories.  Can also set document  'custodians' (editors)  'consumers' (users) and 'approvers' (managers) to faciliate the document lifecycle.

2) Sends you 'reminder' emails for documents needing their annual review.  If the document hasn't changed, it's just a few clicks to endorse it for another year.  If tiny changes are needed, you can do them within the platform via web editing.  If major changes are needed, then download and upload.  If you're just storing a pointer (see 1 above) then you just edit the document in it's repository and mark as complete in the MyVCM.

3)  User tracking.  Put all of your users in the system, assign them documents to review, and you're done. MyVCM emails each user when the document review is due, then tracks their review of the documents, which can include submitting an e-signature for high-compliance environments.

4) Assessments:  When working with compliance vendors, you can collaborate directly with them in MyVCM, and point them to your polices, procedures and evidence within the platform.  No more sending tons of emails with attachments and versioning by appending v39 to the filenames!  Really streamlines the auditing process.

**What do you dislike about Ostendio?**

There is a learning curve. Figuring out how to set up documents vs. audits and setting the timeframe for audits takes some digging into.  Do the training before you set up your initial environment to avoid rework.  Keep tabs on users during initial rollout.  Most users pick it up and are fine, but some that don't 'get it' will need initial help so as to avoid a negative impression of the platform.

**What problems is Ostendio solving and how is that benefiting you?**

Compliance.  Which means... policy and procedure tracking.  User acknowledgement of policies and procedures, and external audits for a certification or report.  Also storage of 'evidence'... reports on log reviews, user access reviews, inventory, etc.

**Official Response from Miranda Elliott:**

> Thanks for your review!  We are glad you are taking advantage of the many modules offered on the Ostendio platform.  Our Client Success team is always available if you need a little extra help when learning how to use the platform. We are also happy to hear your suggestions for ways to improve the platform to make it even easier to use. Just contact your CS Manager who is ready to listen and help!

  ### 33. SOC2 end to end suite Ostendio rocks!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Brenda  M. | Strategic Advisor, Small-Business (50 or fewer emp.)

**Reviewed Date:** March 18, 2021

**What do you like best about Ostendio?**

MyVCM 's best feature is the accessibility for employees to complete tasks and the administrative and management team's ability to create and manage the workflows.
Customer service is" best in class"

**What do you dislike about Ostendio?**

There are many "bells and whistles" and always two ways to do something so you really have to learn alongside the customer service folks.

**What problems is Ostendio solving and how is that benefiting you?**

We are on the journey for SOC2 certification. Matchbook Services caters to some Life Science customers and large Fortune 500 customers. The choice of MyVCM was it too is SOC2 compliant and the subscription allows us to have access to the latest Security controls. Benefits already realized is onboarding of all employees, some vendors, training programs and an audit in the pipeline.

  ### 34. Must needed security program and platform for any Healthcare Startup

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 14, 2021

**What do you like best about Ostendio?**

The cohesive features enable you to develop and sustain your security program throughout the company. As a startup, the cost to utilize the platform is the most cost-effective compared to competitors. The people and company culture behind MyVCM played a big roll developing my program from scratch and teaching me how to run a "real" security program.

**What do you dislike about Ostendio?**

The user interface could be simplified and tuned.

**What problems is Ostendio solving and how is that benefiting you?**

I was developing and managing my security program. As a first-time health care startup, I needed a crash course in security. The Ostendio MyVCM, along with their professional services, allowed me to develop a program in 2 months and drives my team weekly/monthly to make sure our program is running with audits. MyVCM also has annual risk assessments that allow us to review our security program.

  ### 35. Ostendio MyVCM - Excellent Choice

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 02, 2021

**What do you like best about Ostendio?**

Indeed a single, integrated Cybersecurity and Risk Management platform exceeding expectations for many security domains.

**What do you dislike about Ostendio?**

At this time, I have no items to dislike about Ostendio MyVCM.

**What problems is Ostendio solving and how is that benefiting you?**

It has helped our organization streamline and organize audit preparation into a single place to deliver operational efficiency.

  ### 36. Keeps me up to date!

**Rating:** 4.5/5.0 stars

**Reviewed by:** Charlotte P. | University Account Executive, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 01, 2021

**What do you like best about Ostendio?**

I get weekly notifications, so always know if I am caught up.

**What do you dislike about Ostendio?**

Nothing, there isn't anything I haven't been able to do.

**What problems is Ostendio solving and how is that benefiting you?**

Making sure the team is up to date, and nothing falls through the cracks.

  ### 37. MyVCM makes compliance & compliance management easier by consolidating everything under one roof.

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** August 02, 2021

**What do you like best about Ostendio?**

Having a single source of truth in our organization to manage assets, documents, policies, and tickets makes compliance much easier to manage.

**What do you dislike about Ostendio?**

I wish there were more features to automate ticket creation, linking assets, etc.

**What problems is Ostendio solving and how is that benefiting you?**

MyVCM helps small organizations implement proper compliance programs; having the ability to export training logs has been fantastic for audits.

  ### 38. Awesome product supported by a group of amazing people

**Rating:** 4.5/5.0 stars

**Reviewed by:** Dale D. | D, Mid-Market (51-1000 emp.)

**Reviewed Date:** April 21, 2021

**What do you like best about Ostendio?**

Clean interface, nice workflow design, one of the few products out there that keep external consultants in mind

**What do you dislike about Ostendio?**

no downsides at all, the product does what is says it does

**What problems is Ostendio solving and how is that benefiting you?**

Increased work flow efficiency, modernization of some old manual processes

  ### 39. Streamline documentation and audit process

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 20, 2021

**What do you like best about Ostendio?**

Excellent customer support, user-friendly, and easy to navigate.

**What do you dislike about Ostendio?**

There is nothing specific we dislike currently.

**What problems is Ostendio solving and how is that benefiting you?**

Streamlining documentation and review process related to SOC 2 and HITRUST certifications.

  ### 40. Power Tool to Organize Audit and Compliance

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** April 15, 2021

**What do you like best about Ostendio?**

The templates provided from ComplianceForge, saved me countless hours of work.  The ability to tag files, audits, reports, ect with the compliance control is great.

**What do you dislike about Ostendio?**

Sometimes the system is clunky and hard to trigger audits correctly.

**What problems is Ostendio solving and how is that benefiting you?**

Policy management and Compliance gap anaylsis were my main two reasons for deciding that I need a tool.



- [View Ostendio pricing details and edition comparison](https://www.g2.com/products/ostendio/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-13+09%3A32%3A17+-0500&secure%5Bsession_id%5D=75614c09-d004-43e6-955d-5821384d8a45&secure%5Btoken%5D=58b3ce0e7cf97ace8f85054541a26fb1eb9d9afffc14a8cee3936176158126e5&format=llm_user)

## Ostendio Features
**Functionality**
- Customized Vendor Pages
- Centralized Vendor Catalog
- Questionnaire Templates
- User Access Control

**Risk assessment**
- Risk Scoring
- 4th Party Assessments
- Monitoring And Alerts
- AI Monitoring

**Workflows - Audit Management**
- Audit Trail
- Recommendations
- Collaboration Tools
- Integrations
- Planning & Scheduling

**Generative AI - Security Compliance**
- Predictive Risk
- Automated Documentation

**Monitoring - IT Risk Management**
- AI Monitoring

**Documentation - Audit Management**
- Templates & Forms
- Checklists

**Generative AI - Vendor Security and Privacy Assessment**
- Text Summarization
- Text Generation

**Agentic AI - IT Risk Management**
- Autonomous Task Execution
- Multi-step Planning

**Reporting & Analytics - Audit Management**
- Dashboard
- Audit Performance
- Industry Compliance

## Top Ostendio Alternatives
  - [Drata](https://www.g2.com/products/drata/reviews) - 4.7/5.0 (1,148 reviews)
  - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,403 reviews)
  - [Optro](https://www.g2.com/products/optro/reviews) - 4.6/5.0 (1,583 reviews)

