Learn More
Learn More

Average Ratings 168 Ratings

Average Ratings 89 Ratings

Total
ease
features
design
support

Description

The GRC software you've been looking for: Onspring. A flexible, no-code, cloud-based platform, ranked #1 in GRC delivery for 5 years running. Easily manage and share information for risk-based decision-making, monitor risk evaluations and remediation results in real-time, and create reports with with KPIs and single-clicks into details. Whether leaving an existing platform or implementing GRC software for the first time, Onspring has the technology, transparency, and service-minded approach you need to achieve your goals rapidly. Our ready-made product products are designed to get you going as fast as 30 days. SOC, SOX, NIST, ISO, CMMC, NERC, HIPAA, PCI, GDPR, CCPA - name any regulation, framework, or standard, and you can capture, test, and report on controls and then activate remediation of risk findings. Onspring customers love the no-code platform because they can make changes on the fly and build new workflows or reports in minutes, all on their own without the need for IT or developers. When you need nimble, flexible, and fast, Onspring is the best software option on the market.

Description

GRC solution for technology-focused SMBs and Enterprise Information Security Teams. StandardFusion eliminates the need for spreadsheets by using one system of record. You can identify, assess, treat and track risks with confidence. Audit-based activities can be made a standard process. Audits can be conducted with confidence and easy access to evidence. Manage compliance to multiple standards: ISO, SOC and NIST, HIPAA. GDPR, PCI–DSS, FedRAMP, HIPAA. All vendor and third party risk and security questionnaires can be managed in one place. StandardFusion, a Cloud-Based SaaS platform or on-premise GRC platform, is designed to make InfoSec compliance easy, accessible and scalable. Connect what you do with what your company needs.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Common Controls Hub
Ascent
BitSight
Black Kite
Confluence
Jira
Jira Work Management
Okta
Regology
RiskRecon
SecurityScorecard
Slack

Integrations

Common Controls Hub
Ascent
BitSight
Black Kite
Confluence
Jira
Jira Work Management
Okta
Regology
RiskRecon
SecurityScorecard
Slack

Pricing Details

$20,000/year
Free Trial
Free Version

Pricing Details

$1800 per month
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Onspring GRC Software

Founded

2010

Country

United States

Website

www.onspring.com

Vendor Details

Company Name

StandardFusion

Founded

2016

Country

Canada

Website

www.standardfusion.com

Product Features

Audit

Alerts / Notifications
Audit Planning
Compliance Management
Dashboard
Exceptions Management
Forms Management
Issue Management
Mobile Access
Multi-Year Planning
Risk Assessment
Workflow Management

Business Continuity

Backup Log
Backup Scheduling
Compression
Continuous Backup
Encryption
Incremental Backup
Local Server Options
Multiple System Support
Remote Server Options
Secure Data Storage
Web Access / Restoration

Compliance

Archiving & Retention
Artificial Intelligence (AI)
Audit Management
Compliance Tracking
Controls Testing
Environmental Compliance
FDA Compliance
HIPAA Compliance
ISO Compliance
Incident Management
OSHA Compliance
Risk Management
Sarbanes-Oxley Compliance
Surveys & Feedback
Version Control
Workflow / Process Automation

Disaster Recovery

Administration Policies
Bare-Metal Recovery
Encryption
Failover Testing
Flexible Data Capture
Multi-Platform Support
Multiple Data Type Support
Offline Storage

ESG

Activity Dashboard
Analytics/Reporting
Audit Management
Benchmarking
Compliance Management
Data Visualization
Document Management
Performance Metrics
Risk Assessment

GRC

Auditing
Disaster Recovery
Environmental Compliance
IT Risk Management
Incident Management
Internal Controls Management
Operational Risk Management
Policy Management

Incident Management

Audit Trail
Corrective Actions (CAPA)
Disaster Recovery
IT Incident Management
Incident Reporting
OSHA Compliance
Root-Cause Diagnosis
Safety Management
Task Management
Ticket Management

Incident Response

Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management

Integrated Risk Management

Audit Management
Compliance Management
Dashboard
Disaster Recovery
IT Risk Management
Incident Management
Operational Risk Management
Risk Assessment
Safety Management
Vendor Management

Policy Management

Approval Process Control
Attestation
Audit Trails
Policy Creation
Policy Library
Policy Metadata Management
Policy Training
Reporting / Analytics
Version Control
Workflow Management

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Legal Risk Management
Mobile Access
Operational Risk Management
Predictive Analytics
Reputation Risk Management
Response Management
Risk Assessment

Vendor Management

Audit Management
Contact Management
Customer Database
Self Service Portal
Supplier Master Data
Transaction History
Vendor Maintained Profiles
Vendor Managed Inventory
Vendor Performance Rating
Vendor Qualification Tracking

Product Features

Audit

Alerts / Notifications
Audit Planning
Compliance Management
Dashboard
Exceptions Management
Forms Management
Issue Management
Mobile Access
Multi-Year Planning
Risk Assessment
Workflow Management

Compliance

Archiving & Retention
Artificial Intelligence (AI)
Audit Management
Compliance Tracking
Controls Testing
Environmental Compliance
FDA Compliance
HIPAA Compliance
ISO Compliance
Incident Management
OSHA Compliance
Risk Management
Sarbanes-Oxley Compliance
Surveys & Feedback
Version Control
Workflow / Process Automation

Data Governance

Access Control
Data Discovery
Data Mapping
Data Profiling
Deletion Management
Email Management
Policy Management
Process Management
Roles Management
Storage Management

Data Privacy Management

Access Control
CCPA Compliance
Consent Management
Data Mapping
GDPR Compliance
Incident Management
PIA / DPIA
Policy Management
Risk Management
Sensitive Data Identification

GDPR Compliance

Access Control
Consent Management
Data Mapping
Incident Management
PIA / DPIA
Policy Management
Risk Management
Sensitive Data Identification

GRC

Auditing
Disaster Recovery
Environmental Compliance
IT Risk Management
Incident Management
Internal Controls Management
Operational Risk Management
Policy Management

HIPAA Compliance

Access Control / Permissions
Audit Management
Compliance Reporting
Data Security
Documentation Management
For Healthcare
Incident Management
Policy Training
Remediation Management
Risk Management
Vendor Management

Integrated Risk Management

Audit Management
Compliance Management
Dashboard
Disaster Recovery
IT Risk Management
Incident Management
Operational Risk Management
Risk Assessment
Safety Management
Vendor Management

PCI Compliance

Access Control
Compliance Reporting
Exceptions Management
File Integrity Monitoring
Intrusion Detection System
Log Management
PCI Assessment
Patch Management
Policy Management

Policy Management

Approval Process Control
Attestation
Audit Trails
Policy Creation
Policy Library
Policy Metadata Management
Policy Training
Reporting / Analytics
Version Control
Workflow Management

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Legal Risk Management
Mobile Access
Operational Risk Management
Predictive Analytics
Reputation Risk Management
Response Management
Risk Assessment

Vendor Management

Audit Management
Contact Management
Customer Database
Self Service Portal
Supplier Master Data
Transaction History
Vendor Maintained Profiles
Vendor Managed Inventory
Vendor Performance Rating
Vendor Qualification Tracking

Alternatives

Alternatives

integrum Reviews

integrum

integrum Management Systems
ClearGRC Reviews

ClearGRC

Clear Infosec
Onspring Reviews

Onspring

Onspring GRC Software