G2

Brett W.

National Partner

Mid-Market (51-1000 emp.)

8/1/2022

"Ostendio's MyVCM helps make preparing for security audits much easier"

5/5

What do you like best about Ostendio?

MyVCM doesn't just try to check boxes for your security audit. MyVCM actually helps you create a security program along with preparing you for your audit. As a security auditor, I really like the interface and the ability to easily get to the information we need for the audit. In addition, we are able to actually rely on the APIs and other information that we receive for the audit as we understand where the data is coming from and we can verify the completeness and accuracy of those APIs. Review collected by and hosted on G2.com.

What do you dislike about Ostendio?

The MyVCM tool does not implement itself. While I actually view this as a good thing, many of the products in the marketplace make claims that you can implement their software and/or prepare for an audit in days or weeks. In reality, implementing a strong security program for your company is not easy but MyVCM makes the process repeatable and includes everything you will need for an audit. In addition, MyVCM helps you implement leading practices for your security program which is, in my opinion, more important than trying to pass an audit. The security audit is just evidence that you have a strong security program. It is not meant to be your security program. Review collected by and hosted on G2.com.

What problems is Ostendio solving and how is that benefiting you?

Ostendio's MyVCM is attempting to help companies implement a strong security program along with help streamlining various security audits that the company might need to complete (e.g., SOC 2, ISO 27001, PCI DSS, HITRUST, etc.). At Aprio, we perform security audits for all types of companies using all types of security software solutions. We really like MyVCM as the interface is very easy, and we are able to rely on the APIs. As a security auditor, we cannot just assume the security software is providing accurate information without understanding how the APIs work. Many software vendors do not provide the API calls, and therefore, it is very difficult to know if the APIs are effective or just as importantly have the APIs been changed and why. When our client leverages an API from MyVCM, Aprio knows that it is accurate, and we can easily run audit checks on those APIs to confirm they are working as intended or identify when they have changed. Review collected by and hosted on G2.com.

Response from Miranda Elliott of Ostendio

edit

Thanks for your review Brett! Auditors love our platform because they can communicate and collaborate easily with clients. We are glad it is making your life easier!