ProcessUnity Pros and Cons

CyberGRx helps our org to address risks. Review collected by and hosted on G2.com.

nothing as such it gives an overall idea of our risks Review collected by and hosted on G2.com.

ProcessUnity helped us move away from Excel files and streamline our TPRM processes. Now we have a central repository that both vendors and our internal TPRM team use to exchange questions/answers and documentation on risk assessments and finding remediation. Review collected by and hosted on G2.com.

I would have expected some automations to be in place (that we had to build). Also, some performance issues at some point. Review collected by and hosted on G2.com.

The ease of use and implementation to firmwide stakeholders looking for quick turnaround time Review collected by and hosted on G2.com.

Ability to pull topics relevant to finance industry vs the full range of functionality that may not be applicable to our core scope Review collected by and hosted on G2.com.

A user with the right knowledge of the tool can make ProcessUnity do nearly anything they want. Reports are simple to create and customizable dashboards make it easy for business users to see everything they need in one place. Updates/enhancements are pushed out frequently. Review collected by and hosted on G2.com.

Changes are needed to better handle resellers (contact management, assessment, vendor portal). Review collected by and hosted on G2.com.

It is so easy and quick to customize, and the support is super competent, problem solvers. Review collected by and hosted on G2.com.

The questionnaires for Vendors are not customizable. Review collected by and hosted on G2.com.

CyberGRX offers us a cost-efficient, state-of-the-art means to manage third-party cyber risk. Specifically, we appreciate an ability to perform efficient procurement with predictive analytics, analyze our portfolio using a common threat or compliance framework, and ensure that the residual risk we report maps to the actual use of the services for a given third party. Review collected by and hosted on G2.com.

Not all customers or vendors leverage the portfolio. This means some percentage of third-party diligence must be conducted using inefficient legacy approaches (outside the CyberGRX portal) that don't lend themselves to structured data analysis or cyber risk intelligence. We wish we could stop the SOC2 review and risk acceptance processes that wrap around our use of the CyberGRX portal. Review collected by and hosted on G2.com.

The flexibility of the CyberGRX module and the expanding capabilities that are being added on a routine basis make the platform and tool fit for multiple use cases and scenarios. In most cases, when I realize I need a capability in this space, CyberGRX already has a road map and a direction to get there. Review collected by and hosted on G2.com.

I haven't found anything that isn't valuable within the platform, so this is a bit of a stretch, but I would say that adoption is the only real shortfall. Once organizations get a good feel for what CyberGRX is doing, they tend to buy-in well. Review collected by and hosted on G2.com.

Once we filled out the questionnaire, we were able to get a lot of valuable insight into how we stacked up against benchmarks but also leverage these to show customers that we're ahead of the curve --- its very easy to share these reports out with customers and it builds credibility with prospects and their infosec teams to streamline security approvals.

The team there is extremely responsive and helpful as well, theyre all very generous with their time. Review collected by and hosted on G2.com.

It is definitely a process and required a lot of work to put into answering questions, but thats expected. Besides that, we never had any issues with the platform. Review collected by and hosted on G2.com.

The fact that somebody else is taking care of the nitty-gritty work of TPRM, such as designing and mailing out questionnaires, ensuring follow-up, analysing replies, and detecting gaps Review collected by and hosted on G2.com.

The linkeage of their security model to industry standards, such as the NIST cybersecurity framework or ISO 2700x, could be more direct. Comparing different assessments for the same third party throughout time is essentially not supported. The model reflecting "parent child relationships" (e.g. one third party owned by another) is immature. Overall though, these are secondary complaints about an excellent product. Review collected by and hosted on G2.com.

Upguard provides all-in-one suite or a complete package to their customers, which caters or fulfill in one go. This is SaaS based highly performance application which provides security score cards and great dashboard for reporting purpose. Review collected by and hosted on G2.com.

Little bit high cost. But this is not a deciding factor. Overall product is excellent to integrate with your down streams or SSO. Hence this is one of the best tool available in market. Review collected by and hosted on G2.com.