ProcessUnity TPRM Platform Reviews & Product Details

The platform is customizable and our company had some complex business requirements for which the implementation team was great in supporting us throughout the process. We have the ability to change some basic settings and configurations ourselves, which is great and saves time. However, there is a learning curve to understanding how to do this. Overall, we are satisfied with the tool. Review collected by and hosted on G2.com.

Some of our users, specially those who do not use the platform frequently, have some difficulties using it. One thing that in our opinion could be improved is having the vendor request and assessment in a single report with a single workflow and status. Having them separated causes confusion and a lot of clicking to get a complete overview. Review collected by and hosted on G2.com.

the possibilities for automation and customization Review collected by and hosted on G2.com.

the inability to talk to vendors within the application itself Review collected by and hosted on G2.com.

CyberGRx helps our org to address risks. Review collected by and hosted on G2.com.

nothing as such it gives an overall idea of our risks Review collected by and hosted on G2.com.

ProcessUnity helped us move away from Excel files and streamline our TPRM processes. Now we have a central repository that both vendors and our internal TPRM team use to exchange questions/answers and documentation on risk assessments and finding remediation. Review collected by and hosted on G2.com.

I would have expected some automations to be in place (that we had to build). Also, some performance issues at some point. Review collected by and hosted on G2.com.

The ease of use and implementation to firmwide stakeholders looking for quick turnaround time Review collected by and hosted on G2.com.

Ability to pull topics relevant to finance industry vs the full range of functionality that may not be applicable to our core scope Review collected by and hosted on G2.com.

It is so easy and quick to customize, and the support is super competent, problem solvers. Review collected by and hosted on G2.com.

The questionnaires for Vendors are not customizable. Review collected by and hosted on G2.com.

CyberGRX offers us a cost-efficient, state-of-the-art means to manage third-party cyber risk. Specifically, we appreciate an ability to perform efficient procurement with predictive analytics, analyze our portfolio using a common threat or compliance framework, and ensure that the residual risk we report maps to the actual use of the services for a given third party. Review collected by and hosted on G2.com.

Not all customers or vendors leverage the portfolio. This means some percentage of third-party diligence must be conducted using inefficient legacy approaches (outside the CyberGRX portal) that don't lend themselves to structured data analysis or cyber risk intelligence. We wish we could stop the SOC2 review and risk acceptance processes that wrap around our use of the CyberGRX portal. Review collected by and hosted on G2.com.

The flexibility of the CyberGRX module and the expanding capabilities that are being added on a routine basis make the platform and tool fit for multiple use cases and scenarios. In most cases, when I realize I need a capability in this space, CyberGRX already has a road map and a direction to get there. Review collected by and hosted on G2.com.

I haven't found anything that isn't valuable within the platform, so this is a bit of a stretch, but I would say that adoption is the only real shortfall. Once organizations get a good feel for what CyberGRX is doing, they tend to buy-in well. Review collected by and hosted on G2.com.

Once we filled out the questionnaire, we were able to get a lot of valuable insight into how we stacked up against benchmarks but also leverage these to show customers that we're ahead of the curve --- its very easy to share these reports out with customers and it builds credibility with prospects and their infosec teams to streamline security approvals.

The team there is extremely responsive and helpful as well, theyre all very generous with their time. Review collected by and hosted on G2.com.

It is definitely a process and required a lot of work to put into answering questions, but thats expected. Besides that, we never had any issues with the platform. Review collected by and hosted on G2.com.

The fact that somebody else is taking care of the nitty-gritty work of TPRM, such as designing and mailing out questionnaires, ensuring follow-up, analysing replies, and detecting gaps Review collected by and hosted on G2.com.

The linkeage of their security model to industry standards, such as the NIST cybersecurity framework or ISO 2700x, could be more direct. Comparing different assessments for the same third party throughout time is essentially not supported. The model reflecting "parent child relationships" (e.g. one third party owned by another) is immature. Overall though, these are secondary complaints about an excellent product. Review collected by and hosted on G2.com.