Risk Ledger Features
Functionality (26)
-
Data Subject Access Requests
Data Subject Access Request (DSAR) functionality helps companies comply with user access and deletion requests.
-
Identity Verification
Identity verification functionality validates a person's identity prior to a company complying with a data subject access request.
-
Privacy Impact Assessments
Privacy Impact Assessment (PIA) features help companies evalute, assess, track and report on the privacy implications of their data.
-
Data Mapping - survey-based
Data mapping functionality, which helps companies understand how data flows throughout their organization, is achieved through manual surveys sent to company employees.
-
Data Discovery
Data discovery features collect and aggregate data from a variety of sources and prepares it in formats that both people and software can easily use it to then run analytics.
-
Data Classification
Data classification features tag the discovered data to make it easy to search, find, retrieve, and track.
-
De-identification/pseudonymization
De-identification or pseudonymization features replace personally identifiable information with artificial identifiers, or pseudonyms to comply with privacy regulations.
-
Data access governance
Data Access Governance functionality helps limit the number of people who have access to data unless they are permissioned to do so.
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Policy Management
Create, manage, and track policies and procedures within an organization
Vendor Risk Management
Pinpoint and mitigate risk from third-party vendors and suppliers.
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Customer Data Management
Searchable repository of information about clients
Internal Controls Management
Ensure internal objectives and compliance with policies are met
Vulnerability Management
Detect (and block) vulnerabilities and threats in your applications based on vulnerability information
Risk Management
Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties
Metadata Management
Collect and maintain structured information that describes data or content
Data Storage Management
Manage and store data in a database
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Sensitive Data Identification
Identify sensitive or personal information collected from users
Risk Assessment
Initiate collection and analysis of known risks
Deletion Management
-
Customized Vendor Pages
Allows vendors to own and update their vendor page with security and compliance documentation to share with customers
-
Centralized Vendor Catalog
Allows companies to assess vendors profiles in a centralized catalog
-
Questionnaire Templates
Offers standardized security and privacy framework questionnaire templates
-
User Access Control
Offers role based access controls to allow only permissioned users to utilize various parts of the software.
Risk assessment (4)
-
Risk Scoring
Offers built-in or automated vendor risk scoring
-
4th Party Assessments
Offers tools to assess fourth parties -- your vendor's vendors
-
Monitoring And Alerts
Monitors changes in risk and sends notifications, alerts, and reminders for specific actions including: upcoming assessments, profile access requests, etc
AI Monitoring
Uses AI to alert administrators to changes in risk scoring through continuous monitoring.
Risk Assessment (2)
-
Scoring
Users can assign scores to suppliers based on the estimated risk of doing business with them.
-
AI
Utilize artificial intelligence to analyze third party risks.
Risk Control (3)
-
Reviews
Review vendor contracts and profiles to ensure compliance with regulation and internal policies.
-
Policies
Manage and enforce internal policies related to vendor risk management and controls.
-
Workflows
Provide workflows to mitigate risk and escalate issues proactively.
Monitoring (2)
-
Notifications
Send alerts and notifications when corrective actions are needed to address supplier risk.
-
Oversight
Perform ongoing due diligence activities to auto calculate overall risk for each vendor.
Reporting (3)
-
Templates
Include reporting templates for activities such as audits and vendor evaluation.
-
Centralized Data
Consolidate data from multiple systems that manage supplier information.
-
360 View
Provide a 360 view of suppliers which can be shared with internal or external users.
Generative AI - Vendor Security and Privacy Assessment (2)
Text Summarization
Utilizes AI to summarize security questionnaires.
Text Generation
Automate text responses to common security assessment questions.
Agentic AI - Third Party & Supplier Risk Management (2)
Adaptive Learning
Improves performance based on feedback and experience
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (24)
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Single Sign On
Allow users to access multiple services after entering their login credentials once
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Automatic Backup
Data is backed up automatically to prevent data loss
Authentication
Verify the identity of users/devices to enable secure access
Archiving & Retention
Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Data Mapping
Track the management and flow of data throughout the organization
Security Breach Monitoring
Receive alerts and reports of security problems including password breaches
Data Masking
Modification of sensitive data to make it invaluable for unauthorized intruders
Data Lineage
Gives visibility to the origin, history, transformation and location of data
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Data Recovery
Ability to restore deleted, hidden, or lost data from an email server/system
Third-Party Integration
Addition of necessary external data, applications, tools, or features
Privacy Options
Allows users to secure content and data for any use.
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
API
Application programming interface that allows for integration with other systems/databases
Data Security
Protect sensitive data for digital privacy
Secure Data Storage
Securely stores data to prevent data loss or breaches
Data Subject Requests (DSR/DSAR)
Request from data subject to data controller to access, change or delete personal/sensitive information
PIA/DPIA
Data impact assessments to identify and mitigate potential data risks
Encryption
Convert data into a code for security
GDPR Compliance
Ensure compliance with the General Data Protection Regulation protocols