The fact that somebody else is taking care of the nitty-gritty work of TPRM, such as designing and mailing out questionnaires, ensuring follow-up, analysing replies, and detecting gaps Review collected by and hosted on G2.com.

The linkeage of their security model to industry standards, such as the NIST cybersecurity framework or ISO 2700x, could be more direct. Comparing different assessments for the same third party throughout time is essentially not supported. The model reflecting "parent child relationships" (e.g. one third party owned by another) is immature. Overall though, these are secondary complaints about an excellent product. Review collected by and hosted on G2.com.

Upguard provides all-in-one suite or a complete package to their customers, which caters or fulfill in one go. This is SaaS based highly performance application which provides security score cards and great dashboard for reporting purpose. Review collected by and hosted on G2.com.

Little bit high cost. But this is not a deciding factor. Overall product is excellent to integrate with your down streams or SSO. Hence this is one of the best tool available in market. Review collected by and hosted on G2.com.

Balancing between ease of use of the tool and meeting business requirements. It comes with a standard template but allows the requestor on the other end to map the report to the desired framework (GDPR, ISO27001, CCPA, HIPAA, etc...), unlike many tools you need to design your own assessment template and report format.

The tool comes with an external security rating score (from a third party) and threat intelligence information that provides an external view and breach history of the company assessed. It also benchmarks the security rating score with the respective industry.

ML based predictive capabilities which were created from more than 9,000 self-assessments from companies spanning various industries and geographies, provide predictive risk profiles.

The exchange feature of the tool, where a company that had responded to a questionnaire for one customer can share the report with another customer rather than having to fill in the questionnaire all over again.

Evidence validation, CyberGRX uses BIG4 firms to conduct evidence validation.

CyberGRX provides its customers with managed services. Their team can do the follow-up on your behalf, and their customer success team is amazing and very customer focused that provides world-class support. Review collected by and hosted on G2.com.

I have not found anything I dislike at the moment. Review collected by and hosted on G2.com.

This is one of the best tools I have come across that manages Third-Party Risk and Cybersecurity easily with the least manual intervention. A must-have for any business to save a lot of efforts Review collected by and hosted on G2.com.

Its a great innovative product but they can bring affordable pricing for SMEs. This is the only thing that can be improved and rest is already great and delivers the best . Review collected by and hosted on G2.com.

CyberGRX is an excellent tool for flat companies that offer one primary product, service, and/or solution. I can see companies being able to leverage the test once they use many approach. Review collected by and hosted on G2.com.

The platform is not built for complex business structures that offer an array of products, services, and/or solutions. As such, there are a lot of challenges in using the platform. Review collected by and hosted on G2.com.

The most helpful thing about ProcessUnity is the ability to easily capture third-party risk directly from all stakeholders, while also feeding back helpful mitigation recommendations to the business. Review collected by and hosted on G2.com.

The least helpful things about ProcessUnity is that it isn't very easy to onboard new users. This is mostly due to how customizable the solution is, which is great, but also sets back the onboarding process due to the need for documentation creation. Review collected by and hosted on G2.com.

the ability to central these third party assessment in one place with the ability to reuse to gain effiencies Review collected by and hosted on G2.com.

The ability to track customer usage of Cisco CyberGRX assessment to show return on investment. The inability to poll the exchange in the event of a security event. Review collected by and hosted on G2.com.

For my daily work, the best part of Cyber GRX is the easiness to share the assessment with the customers. Review collected by and hosted on G2.com.

I nature of my work, I haven't met any yet. Review collected by and hosted on G2.com.

There is RIO value to vendors completing lengthy questionnaire responses (200+ questions) when allowing the reuse of responses for other parties seeking vendor diligence on your company. Review collected by and hosted on G2.com.

It is not obvious to the outside observer what the 1, 2, 3 assessment tiering level represents on companies' completed response. It should be made clear which level is self-attestation only and which has evidence or validation of responses. Review collected by and hosted on G2.com.

The ability to take the most tedious aspects of third-party risk management and return insights with little to no effort, leaving our internal team free to dive into matters that may pose a risk to the business. Review collected by and hosted on G2.com.

CyberGRX provides various excellent options for mapping standards and controls, what would be nice would be a way to systemically map controls to an organizations pre-established questionnaire(s). Review collected by and hosted on G2.com.