Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 1 Rating

Total
ease
features
design
support

Description

The GRC software you've been looking for: Onspring. A flexible, no-code, cloud-based platform, ranked #1 in GRC delivery for 5 years running. Easily manage and share information for risk-based decision-making, monitor risk evaluations and remediation results in real-time, and create reports with with KPIs and single-clicks into details. Whether leaving an existing platform or implementing GRC software for the first time, Onspring has the technology, transparency, and service-minded approach you need to achieve your goals rapidly. Our ready-made product products are designed to get you going as fast as 30 days. SOC, SOX, NIST, ISO, CMMC, NERC, HIPAA, PCI, GDPR, CCPA - name any regulation, framework, or standard, and you can capture, test, and report on controls and then activate remediation of risk findings. Onspring customers love the no-code platform because they can make changes on the fly and build new workflows or reports in minutes, all on their own without the need for IT or developers. When you need nimble, flexible, and fast, Onspring is the best software option on the market.

Description

TrustMAPP® is the pioneer in Cybersecurity Performance Management.. Recognized by Gartner as a leader in Cybersecurity Performance Management and Cybersecurity Maturity Assessments, TrustMAPP is used by organizations across the globe, TrustMAPP provides information security leaders an ability to quickly measure, quantify, and communicate meaningful control performance, track improvement processes, forecast investment efforts, and quickly build narratives to executive stakeholders. TrustMAPP provides remediation guidance on individual controls based on maturity scores and provides resource effort investment and financial investments to forecast future requirements for cybersecurity funding. TrustMAPP provides decision science and forecasting necessary to elevate the cybersecurity discussion in the boardroom. Information security leaders benefit from alignment with key business objectives and dynamic analytics and report-building capabilities. Information security leaders benefit from a new language that resonates with those who know little (and care even less) about the technical aspects of cybersecurity program management.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Ascent
Black Kite
Cisco Secure Cloud Analytics
Common Controls Hub
Jira
Regology
RiskRecon
SecurityScorecard

Integrations

Ascent
Black Kite
Cisco Secure Cloud Analytics
Common Controls Hub
Jira
Regology
RiskRecon
SecurityScorecard

Pricing Details

$20,000/year
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Onspring GRC Software

Founded

2010

Country

United States

Website

www.onspring.com

Vendor Details

Company Name

TrustMAPP

Founded

2019

Country

United States

Website

trustmapp.com

Product Features

Audit

Alerts / Notifications
Audit Planning
Compliance Management
Dashboard
Exceptions Management
Forms Management
Issue Management
Mobile Access
Multi-Year Planning
Risk Assessment
Workflow Management

Business Continuity

Backup Log
Backup Scheduling
Compression
Continuous Backup
Encryption
Incremental Backup
Local Server Options
Multiple System Support
Remote Server Options
Secure Data Storage
Web Access / Restoration

Compliance

Archiving & Retention
Artificial Intelligence (AI)
Audit Management
Compliance Tracking
Controls Testing
Environmental Compliance
FDA Compliance
HIPAA Compliance
ISO Compliance
Incident Management
OSHA Compliance
Risk Management
Sarbanes-Oxley Compliance
Surveys & Feedback
Version Control
Workflow / Process Automation

Disaster Recovery

Administration Policies
Bare-Metal Recovery
Encryption
Failover Testing
Flexible Data Capture
Multi-Platform Support
Multiple Data Type Support
Offline Storage

ESG

Activity Dashboard
Analytics/Reporting
Audit Management
Benchmarking
Compliance Management
Data Visualization
Document Management
Performance Metrics
Risk Assessment

GRC

Auditing
Disaster Recovery
Environmental Compliance
IT Risk Management
Incident Management
Internal Controls Management
Operational Risk Management
Policy Management

Incident Management

Audit Trail
Corrective Actions (CAPA)
Disaster Recovery
IT Incident Management
Incident Reporting
OSHA Compliance
Root-Cause Diagnosis
Safety Management
Task Management
Ticket Management

Incident Response

Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management

Integrated Risk Management

Audit Management
Compliance Management
Dashboard
Disaster Recovery
IT Risk Management
Incident Management
Operational Risk Management
Risk Assessment
Safety Management
Vendor Management

Policy Management

Approval Process Control
Attestation
Audit Trails
Policy Creation
Policy Library
Policy Metadata Management
Policy Training
Reporting / Analytics
Version Control
Workflow Management

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Legal Risk Management
Mobile Access
Operational Risk Management
Predictive Analytics
Reputation Risk Management
Response Management
Risk Assessment

Vendor Management

Audit Management
Contact Management
Customer Database
Self Service Portal
Supplier Master Data
Transaction History
Vendor Maintained Profiles
Vendor Managed Inventory
Vendor Performance Rating
Vendor Qualification Tracking

Product Features

Business Performance Management

Ad Hoc Reports
Ad hoc Analysis
Budgeting & Forecasting
Consolidation / Roll-Up
Dashboard
Key Performance Indicators
Predictive Analytics
Qualitative Analysis
Quantitative Analysis
Scorecarding
Strategic Planning

Compliance

Archiving & Retention
Artificial Intelligence (AI)
Audit Management
Compliance Tracking
Controls Testing
Environmental Compliance
FDA Compliance
HIPAA Compliance
ISO Compliance
Incident Management
OSHA Compliance
Risk Management
Sarbanes-Oxley Compliance
Surveys & Feedback
Version Control
Workflow / Process Automation

Cybersecurity

AI / Machine Learning
Behavioral Analytics
Endpoint Management
IOC Verification
Incident Management
Tokenization
Vulnerability Scanning
Whitelisting / Blacklisting

Data Governance

Access Control
Data Discovery
Data Mapping
Data Profiling
Deletion Management
Email Management
Policy Management
Process Management
Roles Management
Storage Management

Integrated Risk Management

Audit Management
Compliance Management
Dashboard
Disaster Recovery
IT Risk Management
Incident Management
Operational Risk Management
Risk Assessment
Safety Management
Vendor Management

Risk Management

Alerts/Notifications
Auditing
Business Process Control
Compliance Management
Corrective Actions (CAPA)
Dashboard
Exceptions Management
IT Risk Management
Internal Controls Management
Legal Risk Management
Mobile Access
Operational Risk Management
Predictive Analytics
Reputation Risk Management
Response Management
Risk Assessment

Alternatives

Alternatives

integrum Reviews

integrum

integrum Management Systems
CyberStrong Reviews

CyberStrong

CyberSaint Security
ClearGRC Reviews

ClearGRC

Clear Infosec
STREAM Integrated Risk Manager Reviews

STREAM Integrated Risk Manager

Acuity Risk Management