Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more. IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.

Description

Scale up your risk and security functions to be able to operate with confidence. Global threats continue to evolve, posing new and unexpected risks for people and organizations. OneTrust Tech Risk and Compliance helps your organization and supply chains to be resilient in the face continuous cyber threats and global crises. Manage increasingly complex regulations, compliance requirements, and security frameworks with a unified platform that prioritizes and manages risk. Manage first- or third party risk using your chosen method. Centralize policy creation with embedded collaboration and business intelligence capabilities. Automate evidence gathering and manage GRC tasks within the business.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS) Yes 
CA Flowdock Yes 
EQS Compliance COCKPIT No 
FortifyData Yes 
GitHub Yes 
Ironclad No 
Jira Yes 
Jira Service Management Yes 
Ketch No 
Lucidchart Yes 
OAuth Yes 
OWASP ZAP Yes 
OneTrust Consent & Preferences No 
OneTrust Data Use Governance No 
OneTrust Privacy Automation No 
OneTrust Third-Party Management No 
Redmine Yes 
SecuPi No 
Serenity BDD Yes 
ServiceNow Yes 

Integrations

Amazon Web Services (AWS) No 
CA Flowdock No 
EQS Compliance COCKPIT Yes 
FortifyData No 
GitHub No 
Ironclad Yes 
Jira No 
Jira Service Management No 
Ketch Yes 
Lucidchart No 
OAuth No 
OWASP ZAP No 
OneTrust Consent & Preferences Yes 
OneTrust Data Use Governance Yes 
OneTrust Privacy Automation Yes 
OneTrust Third-Party Management Yes 
Redmine No 
SecuPi Yes 
Serenity BDD No 
ServiceNow No 

Pricing Details

Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

IriusRisk

Country

Spain

Website

www.iriusrisk.com/

Vendor Details

Company Name

OneTrust

Founded

2016

Country

United States

Website

www.onetrust.com/solutions/tech-risk-and-compliance/

Product Features

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management No 
Response Management No 
Risk Assessment Yes 

Product Features

Audit

Alerts / Notifications No 
Audit Planning No 
Compliance Management No 
Dashboard No 
Exceptions Management No 
Forms Management No 
Issue Management No 
Mobile Access No 
Multi-Year Planning No 
Risk Assessment No 
Workflow Management No 

Compliance

Archiving & Retention No 
Artificial Intelligence (AI) No 
Audit Management No 
Compliance Tracking No 
Controls Testing No 
Environmental Compliance No 
FDA Compliance No 
HIPAA Compliance No 
ISO Compliance No 
Incident Management No 
OSHA Compliance No 
Risk Management No 
Sarbanes-Oxley Compliance No 
Surveys & Feedback No 
Version Control No 
Workflow / Process Automation No 

GRC

Auditing No 
Disaster Recovery No 
Environmental Compliance No 
IT Risk Management No 
Incident Management No 
Internal Controls Management No 
Operational Risk Management No 
Policy Management No 

Incident Management

Audit Trail No 
Corrective Actions (CAPA) No 
Disaster Recovery No 
IT Incident Management No 
Incident Reporting No 
OSHA Compliance No 
Root-Cause Diagnosis No 
Safety Management No 
Task Management No 
Ticket Management No 

Policy Management

Approval Process Control No 
Attestation No 
Audit Trails No 
Policy Creation No 
Policy Library No 
Policy Metadata Management No 
Policy Training No 
Reporting / Analytics No 
Version Control No 
Workflow Management No 

Alternatives

Devici Reviews

Devici

Security Compass

Alternatives

Onspring Reviews

Onspring

Onspring GRC Software
SD Elements Reviews

SD Elements

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity