Compliance Manager GRC includes powerful features designed to deliver the IT security assurance required by any organization. Yet, it’s so easy to use, any non-technical compliance stakeholder can participate in the process.
Stay compliant today, and tomorrow, with our continuous innovation process that keeps pace with the ever-expanding IT security and regulatory environment.
Compliance Manager GRC reduces IT risk by ensuring compliance with government or industry standards, as well as with the IT requirements included in any business contract, insurance policy, or your own IT security policies and procedures. It automates data gathering, issue management and all the documentation required to prove Due Care to any internal or external auditor. This is all made possible through a simplified and streamlined workflow that makes it easy for IT professionals to manage compliance with all of their IT Requirements at the same time -- regardless of source or type -- through a web-based portal that's accessible from anywhere at any time from any computer.
There’s so much more to compliance than following just one government or industry standard. IT professionals support many different stakeholders in the organization, and Compliance Manager GRC is designed to be flexible enough to support them all – and all at the same time.
The results:
- Improved security
- Increased efficiency
- Lower costs
- Use any of the “pre-built” government and industry standards that we continually add into the platform
- Manage compliance with the IT requirements of any vendor contracts, including your cyber risk insurance policies
- Create your own IT policy requirements, controls and standards by cloning existing templates, or starting from scratch
- Perform Rapid Baseline Assessments against any standard in the system, or those you create
- Create a complete set of automated compliance documents for any standard you adopt or create, including a customized policies & procedures manual.
- Ensure all end-users are aware of your policies and track compliance with the built-in security awareness training.
- Verify that all vendors who touch your data are compliant with your requirements
| Built-in Standards and Frameworks | NIST-CSF, HIPAA, GDPR (UK & EU), CMMC 2.0, NIST SP 800-171, NYDSF, Cyber Insurance Readiness, and more being added regularly (check our website for detail) |
| Automated Scans | Technical scans are performed by the Compliance Manager software. Includes Network, local computer, and MS Cloud scans |
| Role-based Assignments | Divides the workload into three primary roles: Internal Auditor, Technician, and Site Admin. |
| Online Forms and Worksheets | Complete worksheets and forms to augment information collected automatically. |
| Plans of Action & Milestones | Dynamic project plans to manage and document remediation activities. |
| Task Notification | As tasks are assigned, stakeholders are notified via email. |
| Auditor Checklists | Summary documents of compliance with cross-references to other documents. |
| Evidence of Compliance | Detailed document showing information from both automated scans, augmented data, and questionnaires. |
| Policies and Procedures Generator | Customize P&P manuals automatically generated based on each standard. |
| Risk Treatment Plans | Shows what issues were found and tracks which issues were addressed based upon risk scoring methodology. |
| Compliance Standard Specific Scans | Scans system looking for information pertinent to the specific compliance standards. |
| VulScan Integration | Internal and external vulnerability reports automatically generated from VulScan data |
| Brandable Reports | Customize logo, colors, templates, and images. |
| Report Archiving | Compliance Manager software stores past assessments and reports. |
| Collaborative Compliance | Invite others to collaborate in completing compliance assessments. |
| Compliance Guidance | Compliance Manager presents in-product guidance to help you complete the assessment. |
| Integration With IT Glue | Allows direct hyperlinks to Evidence of Compliance documents stored in IT Glue. |
| Security Awareness Training | Deliver self-serve end-user training and track results for compliance. |
| End-user/Employee Portal | Brandable web-based portal for training and policy attestation. |
| Vendor Risk Management | Track vendor compliance with any required standard. |