# ZenGRC Reviews **Vendor:** Zengrc **Category:** [Enterprise Risk Management (ERM) Software](https://www.g2.com/categories/enterprise-risk-management-erm) **Average Rating:** 4.4/5.0 **Total Reviews:** 103 ## About ZenGRC ZenGRC offers an established solution to elevate your company's risk and compliance program to the highest infosec standards. The cloud-based SaaS solution fits your existing GRC program and also evolves to guide you throughout your maturity roadmap. With ZenGRC as the central platform for your organization's entire infosec ecosystem, you can achieve continuous monitoring and efficient audit management capabilities, as well as customizable, end-to-end risk management that's built-in — not bolted on. Companies from SMB all the way to Enterprise use ZenGRC for... — Minimized manual effort through automation — Shortened, simplified audit cycles — Risk management that’s built-in—not bolted on — Increased visibility and reporting with dashboards — Direct integrations with ServiceNow, AWS, Qualys, Slack, JIRA, and more. ## ZenGRC Pros & Cons **What users like:** - Users value the **automation capabilities** of ZenGRC, streamlining workflows and simplifying audit management significantly. (3 reviews) - Users value the **centralized compliance management** of ZenGRC, simplifying audits and enhancing efficiency across various standards. (3 reviews) - Users find ZenGRC to be an **easy-to-use platform** that simplifies compliance management and auditing processes significantly. (3 reviews) - Users praise the **efficient evidence management** of ZenGRC, streamlining audits and enhancing compliance through centralized access. (3 reviews) - Users commend ZenGRC for its **efficient audit management** , transforming coordination and accessibility during audit seasons. (2 reviews) - Users appreciate the **easy certification process** of ZenGRC, benefiting from automated workflows and excellent customer support. (2 reviews) - Customer Support (2 reviews) - Easy Integrations (2 reviews) - Users value the **functionality and manageability** of ZenGRC, appreciating its easy implementation and automation capabilities. (2 reviews) - Flexibility (2 reviews) **What users dislike:** - Users find ZenGRC's **inadequate reporting** capabilities limiting, prompting many to create custom solutions externally. (3 reviews) - Users find **reporting capabilities limited** in ZenGRC, prompting the need for external solutions like PowerBI. (3 reviews) - Users find ZenGRC's **poor reporting** capabilities limiting, leading them to seek alternatives for better data analysis. (3 reviews) - Users find the **reporting capabilities limited** , often needing to create custom solutions for their needs. (3 reviews) - Users find ZenGRC's **complex implementation** challenging for specialized reporting needs and intricate workflows. (1 reviews) - Users find ZenGRC's **complex navigation** unsuitable for intricate workflows requiring specialized reporting features. (1 reviews) - Complex Permissions (1 reviews) - Dashboard Issues (1 reviews) - Interface Issues (1 reviews) - Lack of Guidance (1 reviews) ## ZenGRC Reviews ### 1. How a 2-person team manages enterprise-level compliance **Rating:** 4.5/5.0 stars **Reviewed by:** Christian L. | Security Compliance Program Manager / Senior Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** December 24, 2025 **What do you like best about ZenGRC?** Before ZenGRC we were living in spreadsheet hell - endless back-and-forth emails, no central management, and audits were a nightmare to coordinate. Now everything lives in one place across SOC2, HIPAA, NIST, and ISO 27001. What really sold me is how it handles audit season. Our external auditors fill out ZenGRC's import spreadsheet with their requests and control mappings, it flows right into the platform, and they interact directly with our SMEs to ask questions and approve evidence. We're not playing middleman anymore. A team of 1-2 people can manage a full company audit now. We've also built PowerBI dashboards pulling from ZenGRC's API, and even have a SharePoint security exception form that auto-generates exceptions in Zen. When we've gotten stuck, their team jumps on a Zoom and walks us through it. **What do you dislike about ZenGRC?** Native reporting and dashboards are limited - that's why we ended up building our own in PowerBI. Sorting and filtering in the UI still needs work. They've been receptive to feedback and we've gotten features added, but development can be slow. **What problems is ZenGRC solving and how is that benefiting you?** We're a healthcare company that needs to stay aligned with SOC2, HIPAA, NIST, ISO 27001 - and prove it to auditors regularly. Before Zen, that meant spreadsheets everywhere, evidence scattered across email threads, and way too much manual coordination. ZenGRC gives us one place to manage all of it. Control mappings across frameworks, evidence collection AND evidence reuse so not more uploading the same evidence for back to back audits, risk tracking, audit requests - it's all centralized. Our auditors work directly in the platform now instead of us being the go-between for every question and document request. The bottom line is a small team can run a compliance program that would've taken way more people and way more chaos before. Managing sustem vulnerabilities is pretty easy now with JIRA integration we can bring in Engineering teams, create remediation plans and more and link everything to everything else. We are working on a system owner dashboard that will show a system owner all their items in a single view. This platform is allowing real security and compliance maturity for our organization. ### 2. Great for Evidence Collection, but Integrations and Permissions Need Work **Rating:** 3.0/5.0 stars **Reviewed by:** Natalia S. | Senior Risk Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** March 19, 2026 **What do you like best about ZenGRC?** evidence collection and bulk creation of requests **What do you dislike about ZenGRC?** lack of integrations and user permissions **What problems is ZenGRC solving and how is that benefiting you?** replacing spreadsheet for managing multiple audits ### 3. It's a useful tool, but it isn't very user-friendly at all. **Rating:** 4.0/5.0 stars **Reviewed by:** Kyle M. | Associate Manager of Operations, Enterprise (> 1000 emp.) **Reviewed Date:** July 15, 2025 **What do you like best about ZenGRC?** The usefulness of the tool. That's really about it. **What do you dislike about ZenGRC?** The program isn't very user-friendly. I have to try and remember what steps to follow because even the instructions aren't very clear. The last time I was supposed to review access, I never received the email for it and took some heat for not having it completed yet. I was only able to access it because I somehow found the Q1 review and was able to access it via that email. **What problems is ZenGRC solving and how is that benefiting you?** Making sure everyone has the correct access that they need. ### 4. Major Improvements in Compliance Program **Rating:** 4.5/5.0 stars **Reviewed by:** Maggie L. | IT Risk and Compliance Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** June 20, 2025 **What do you like best about ZenGRC?** ZenGRC has allowed us to make major improvements in our compliance program through efficient sharing of evidence and mapping controls to various frameworks and standards. It allows our internal and external audit teams to access evidence directly from the audit requests, reducing the back and forth between users. **What do you dislike about ZenGRC?** ZenGRC should have an archive feature that allows you to archive old tasks and requests. **What problems is ZenGRC solving and how is that benefiting you?** ZenGRC has helped solve issues with evidence gathering for audits because assignees can upload evidence directly and share with the auditors. ### 5. Amazing Software **Rating:** 5.0/5.0 stars **Reviewed by:** Sudeep P. | Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** April 10, 2025 **What do you like best about ZenGRC?** Automating the work flow. It's so easy to do that and it's integrated with most of the softwares that we use. It's super easy to implement and we use it all the time ! Customer support is also really nice and has helped in giving swift responses to any questions we have about the large number of features available. **What do you dislike about ZenGRC?** none. Regular updates will be greatly appreciated **What problems is ZenGRC solving and how is that benefiting you?** ZenGRC is helping us mitigating the IT risk management. We have integrated it to all the major softwares and have automated our workflows too ### 6. Works great for it's intended use **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Logistics and Supply Chain | Mid-Market (51-1000 emp.) **Reviewed Date:** July 15, 2025 **What do you like best about ZenGRC?** It keeps track of the Q necesicites without me needing to set reminders on my calendar or notes and the requirements tend to be done pretty quickly. **What do you dislike about ZenGRC?** The UI is not the best, utilitarian at best and doesn't have a dark mode. **What problems is ZenGRC solving and how is that benefiting you?** User access and when to refresh it as well as keeping track of all my team acceses for accounts, bill to codes, features on systems etc. ### 7. This system is easy to use. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** July 15, 2025 **What do you like best about ZenGRC?** I like being able to see what documents I've added for each control for times when I may have missed importing one of them. It's also easy to access via SSO. **What do you dislike about ZenGRC?** I don't have anything I dislike about ZenGRC. **What problems is ZenGRC solving and how is that benefiting you?** Central repository for documents requested for SOC-1 audits, which is easy to use. ### 8. Zen-like experience with ZenGRC **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Utilities | Enterprise (> 1000 emp.) **Reviewed Date:** June 25, 2025 **What do you like best about ZenGRC?** Modern user interface, end-to-end risk & compliance management platform capabilities **What do you dislike about ZenGRC?** Lack of advanced reporting and analytics **What problems is ZenGRC solving and how is that benefiting you?** end-to-end GRC, audit management, compliance and risk reporting ### 9. Centralized and adaptive platform **Rating:** 4.5/5.0 stars **Reviewed by:** Purnima K. | Pre-sales executive, Small-Business (50 or fewer emp.) **Reviewed Date:** April 02, 2025 **What do you like best about ZenGRC?** It maintains a strong relationship with the stakeholders by keeping all the records in order. **What do you dislike about ZenGRC?** It is not ideal for complex kind of workflows where the specialized report is needed **What problems is ZenGRC solving and how is that benefiting you?** It is suitable for maintaining a good workflow by keeping all the records in place. It also helps to build a strong relationship with the stakeholders. I benefited me by reducing the manual labor. ### 10. Efficient for streamlining GRC processes **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Education Management | Enterprise (> 1000 emp.) **Reviewed Date:** April 02, 2025 **What do you like best about ZenGRC?** It is easy to use, customisable tool that can manage multiple compliance initiatives. **What do you dislike about ZenGRC?** ZenGRC has limited reporting capabilities. **What problems is ZenGRC solving and how is that benefiting you?** It has simplified compliance management by providing a centralised framework for managing multiple regulations and standards. It also helps in reducing risk thereby improving overall security posture. ### 11. Looking for a ISO and NIST GRC tool? **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Construction | Enterprise (> 1000 emp.) **Reviewed Date:** June 01, 2023 **What do you like best about ZenGRC?** Zen is very user friendly when conducting ISO 27001 audits for internal reviews. **What do you dislike about ZenGRC?** There is not already an established integration with Service Now. **What problems is ZenGRC solving and how is that benefiting you?** Before Zen we ran our audits on excel spreadsheets and normal Outlook. Zen gives you one nice storage location for our ISO audits and has the capabilities to send reminder emails on outstanding tasks. ### 12. GRC "easy button" **Rating:** 5.0/5.0 stars **Reviewed by:** Kert John D. | Global Director - IT Operations & Security, Small-Business (50 or fewer emp.) **Reviewed Date:** March 18, 2023 **What do you like best about ZenGRC?** Being newer to leveraging a GRC tool, what attracted me most to ZenGRC was the functionality and manageability versus the others players in that space. "Easy-button" **What do you dislike about ZenGRC?** There are no downsides to ZenGRC from my perspective, however we did struggle with where to start in the usage of the tool. We simply leveraged a 3rd-part expert to assist. **What problems is ZenGRC solving and how is that benefiting you?** Centralized document repository for policies, procedures, and network diagrams, 3rd-party risk questionnaires, and pulling all of the numerous governances cross mappings for our global sites into one tool. ### 13. Time consuming tool **Rating:** 4.5/5.0 stars **Reviewed by:** Gireesh V. | Vendor Management Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** March 15, 2021 **What do you like best about ZenGRC?** I like the following: 1. Bulk upload of Audits 2. Ownership change for the tasks at bulk 3. Able to filter many ways to track the exact Audit 4. End to end audit tracking **What do you dislike about ZenGRC?** I wouldn't say I like the following : 1.There is no option shows as the due date for the tasks 2.Also whenever, I changed the owner/assignee for the parent task, it's not reflecting the same for sub-tasks, and I need to update manually every time 3. All future tasks are showing under the To-Do action list 4. Parent tasks should not show under the To-Do action list since it's the main task for auto-creation of sub-tasks 5.Dashboard view is not good 6. System systems are getting cleared whenever I log in fresh 7.Even If I share the read access, the user can edit the tasks 8.Assignee may change over time, and even though the parent request gets updated, it does not reflect in the recurring requests that spin-off it 9.Sometimes, the recurrence gets skipped. In other words, sometimes a month gets skipped 10. we are not able to duplicate a request automatically without recurrence and a manual process **Recommendations to others considering ZenGRC:** Because of it's easy of use, we can recommend at 7 for 10. **What problems is ZenGRC solving and how is that benefiting you?** Problems are solving but again it's manual job like eg. In order to fix the owner for Parent task - I need to stop occurrence for each parent task & need to update the owner details and again need to start the occurrence for each... ### 14. Great GRC tool for mid size companies! **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** March 26, 2023 **What do you like best about ZenGRC?** The tool is very user-friendly, customizable. **What do you dislike about ZenGRC?** The other correlating modules are not mature compared to it's competitors. **What problems is ZenGRC solving and how is that benefiting you?** IT is automating the GRC process and taking us away from manual spreadsheets. ### 15. Solid tool for GRC **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** January 16, 2020 **What do you like best about ZenGRC?** The tool is easy to navigate in and has a lot of flexibility to add custom attributes to each of the data types, particularly when using it as a system of record for compliance-related activities. The company is also really receptive to feedback as far as its features - they've incorporated a lot of the feedback provided. **What do you dislike about ZenGRC?** There are some features that aren't super robust - like role-based access controls, uploading multiple files to a record in bulk, and the general setup of the Jira integration. **Recommendations to others considering ZenGRC:** Make sure you understand what you need from your GRC tool. If you're looking to tie into piles and piles of other tools, have complex workflows, and do specialized reporting, you'll want something more robust, heavier, and expensive. Zen was a good balance of functionality and cost for my company. Also, it really helps in implementation if you controls defined in advance. **What problems is ZenGRC solving and how is that benefiting you?** ZenGRC is the system of record for a slew of activities at my company, including the risk register, vendors and vendor risks, critical changes, and security controls. The audit functionality will be the next thing we hope to use exclusively. ZenGRC is effectively a "force multiplier" for a one-person GRC team - it would take 2-3 more people to keep track of all the data we keep in Zen, so the cost savings is easily there. ### 16. User-friendly tool - ZenGRC **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** December 10, 2021 **What do you like best about ZenGRC?** ZenGRC is a great tool to manage our complete audit cycle end to end, from automating a request to collect evidence on a defined frequency and closing them with the validation. It can be integrated with many audit frameworks. It creates an easy job in tracking and aligning the collected data in a structured way. It reduces a lot of manual work on tracking things. The tool is very much user-friendly. The support team's response to add features or resolve issues is applauded. **What do you dislike about ZenGRC?** It would have been wonderful if the licensing is related to the number of users, as we face these issues as our Organization is on tremendous growth now, and we have to onboard several users to the tool. We may also need some more features added to the iterations of the created tasks. Also it would be good if the tools allows some more ways of customization that can be allowed on the taks that are being created. It would be good to have a free trail initially to have a feel on the tool before having user subscriptions **Recommendations to others considering ZenGRC:** I would be very much happy to recommend ZenGRC. It helps in many ways to ease much of the manual work people are held up currently and clear several backlogs. **What problems is ZenGRC solving and how is that benefiting you?** We primarily use ZenGRC for SOC 2 and SOC 1 evidence collections for the multiple products (seven products are already in ZenGRC, six are to be onboarded in 2022). It works so smooth and is pretty much aligned with all our requirements related to SOC, and we are planning to have Risk mapping added to this tool. Audit Collection & Management Vendor Assessment Survey Controls Mapping Compliance Gaps Discovery ### 17. Great ZenGRC **Rating:** 3.5/5.0 stars **Reviewed by:** Jeneen R. | Case Investigator, Mid-Market (51-1000 emp.) **Reviewed Date:** June 08, 2022 **What do you like best about ZenGRC?** I find it most helpful how it reduced manual efforts and creates an easier process for people who use this tool for business related work. **What do you dislike about ZenGRC?** I dislike how it is integrates third party apps. This makes the software slower and it is not always accurate. **What problems is ZenGRC solving and how is that benefiting you?** It solves the issue of research and makes data analysis easier for everyone. ### 18. Comprehensive Approach to Risk Management **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** November 24, 2021 **What do you like best about ZenGRC?** ZenGRC's training and educational content under the knowledge base make it easy to stand up the platform yourself with minimal support. ZenGRC allows for a common approach to risk management across the enterprise and can be used by all business units. ZenGRC also enables a holistic view of how compliance status, program maturity, audit results, and vendors affect the overall risk score of the organization. This solution is easy to use, easy to stand up, and scalable as your organization grows. ZenGRC also offers excellent support. **What do you dislike about ZenGRC?** A more robust API integration with Jira would be beneficial. Vendor review requests submitted through Jira contain information that needs to be then re-entered into the GRC tool. I would prefer that this information already required for the ticket would be able to feed into the GRC tool without manual re-entry by the risk analyst. **What problems is ZenGRC solving and how is that benefiting you?** To increase the throughput of the vendor risk review and management program and to facilitate a common approach to risk management across the enterprise. Immediate benefits include better tracking of artifacts, better risk score reporting, and a better process to solicit information from third parties. ### 19. ZenGRC **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** November 19, 2021 **What do you like best about ZenGRC?** Fairly easy to navigate with sidebar menu. Many options of things to record (audits, issues, etc.) User access easily integrated into our single sign on capability. **What do you dislike about ZenGRC?** Could do better withthe side bar menu as not all options are listed and it's a roundabout process to get to some of the options. Also navigation from one screen or page to another often entails going back to the beginning. Search functionality could be improved - not always easy to find information within a recorded item. Could do with having more fields when recording an issue/risk, to include more for action plans/due dates/owners and details for example. Some of the above might simply be because I am farily new at using it. AS I get more familiar, they might become easier. **What problems is ZenGRC solving and how is that benefiting you?** Tracking an external audit. Benefit is centralised repository which includes allowing access to external auditor (rather than giving them access to any other internal tools). Tracking issues/risks. Again centralisation and access control is good. Reporting is fairly good (and I need to learn more about it) ### 20. Great to help us grow the practice and grow the tool together. Makes GRC so simple. **Rating:** 4.5/5.0 stars **Reviewed by:** Kanupriya P. | privacy and compliance specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** ZenGRC gives us the ability of using the various aspects of a GRC tool. It does not restrict based on modules which helps us to implement all modules in the ways that work best for the organization. The modules provide ease of customizing the fields we want to capture and how we want to import or export bulk data. Also, the controls mapping using SCF is beneficial to link various standards with a common set of controls. Also loved the dedicated team which was able to answer all pour questions during the demo and POC phases. The product specialists are know the product and really loved that they were working continuously to improve the tool functionality. **What do you dislike about ZenGRC?** The current user interface can be improved. The report extracts and one view look needs to be improved. Right now, the platform has too many tabs under the same control / risk / issues.. it is highly beneficial if all of this can be brought in a one view look. The Platform does not allow user access to be restricted per module. Eg: Control owner with editor access can even edit policies and risks which is not a great way to implement segregation fo duties. We need role based access accross the platform. **Recommendations to others considering ZenGRC:** Use the knowledge base which ZenGRC brings with it. The Risk Library, the various templates, the mapped control sets, all these helped us in setting up the tool and starting to use it from day 1 to guide the overall function. Invest a lot of time in setting up the Tool right from the start. **What problems is ZenGRC solving and how is that benefiting you?** Central tool to consolidate risk management activities. record external audit results and plan and perform audits and assessments. vendor management and repository, issue tracking, Business impact analysis and defining common controls framework. Also intend to use it for expanding our certifications like ISO 27001, SOC 2 etc. ### 21. Easy to Use GRC **Rating:** 5.0/5.0 stars **Reviewed by:** Chelsea M. | S, Mid-Market (51-1000 emp.) **Reviewed Date:** December 13, 2021 **What do you like best about ZenGRC?** I really like how user friendly the system is out of the box. Anything that is not inherently obvious based on the user interface is available in the knowledge base. **What do you dislike about ZenGRC?** I do think the sear h functionality is lacking. You are able to filter based on attribute type, but a general search bar in its place would be really helpful. **What problems is ZenGRC solving and how is that benefiting you?** We are utilizing ZenGRC as a vendor database, risk register and to track our audits. ### 22. Flexible GRC platform with strong vendor support **Rating:** 5.0/5.0 stars **Reviewed by:** Rob C. | Senior Security Compliance Specialist, Enterprise (> 1000 emp.) **Reviewed Date:** September 09, 2021 **What do you like best about ZenGRC?** ZenGRC makes it easy to map objects between frameworks, programs, risks, and vendors, which reduces labor duplication and provides insight on the impacts of making positive changes. The onboarding program is outstanding, giving new users a strong foundation for the basics of the platform and confidence in their workflows. **What do you dislike about ZenGRC?** I haven't found anything so far that I disliked. Typically any issue that I found was resolved with some education from ZenGRC support. **What problems is ZenGRC solving and how is that benefiting you?** We have multiple security frameworks and standards to manage and ZenGRC will allow us to do this in a far more organized and functional manner than spreadsheets and emails. Having our risk register, ISO programs, and audits all on one platform is a huge benefit for our small team. ### 23. Implemented ZenGRC at medium sized Healthcare Company **Rating:** 4.5/5.0 stars **Reviewed by:** Steven J S. | Sr. Information Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** June 30, 2021 **What do you like best about ZenGRC?** ZenGRC has a System of Record for all types of objects including: Business, Compliance, Audit, and Risk objects. Also there is built in workflows and dashboard capabilities that are quick and easy to set up. Also, data import and export capabilities save a lot of time. **What do you dislike about ZenGRC?** Creating Complex dashboards is limited and less intuitive than other parts of the toolset. This may be due to a lack of user experience in this area. **What problems is ZenGRC solving and how is that benefiting you?** Many problems are being solved, including a lack of structure and management of Governance, Risk and Compliance in the organization, work efficiency issues, and a lack of a single system of record for Compliance objects. So far, the benefits include automation of compliance review and assessment processes, and the built in logging that allows for sufficient evidence for external audits. ### 24. Onboard new customer **Rating:** 4.0/5.0 stars **Reviewed by:** Robbie F. | Head of Risk Management, Mid-Market (51-1000 emp.) **Reviewed Date:** November 17, 2021 **What do you like best about ZenGRC?** Onboarding with recorded training is best for revisit. * Helpful team * Follow up with the queries after the call * On top of any issues raised **What do you dislike about ZenGRC?** Perhaps the time zone, as we are in APAC region. Better adjust the calls to customer needs. My my case it was okay, just feel for other collagues. **What problems is ZenGRC solving and how is that benefiting you?** Better Risk Management framewrk for our agile firm. ### 25. Great tool, easy to use **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** February 22, 2022 **What do you like best about ZenGRC?** The quick link bar helps to view everything on the same screen, thus helping in easy navigation across the tool. **What do you dislike about ZenGRC?** The tool does not allow organization branding, such as adding logos. **What problems is ZenGRC solving and how is that benefiting you?** We onboarded ZenGRC for centrally managing our controls and audits. We can now easily visualize the overlapping of control across standards ### 26. Takes a lot of the pain out of managing multiple compliance frameworks **Rating:** 5.0/5.0 stars **Reviewed by:** Tyrone M. | Chief Information Security Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** April 13, 2021 **What do you like best about ZenGRC?** Top of the list has to be mapping controls to multiple frameworks. We currently audit against 6 frameworks and the fact that we don't have to deal with duplicated evidence requests is a huge win. We use ZenGRC for our Vendor Security Questionnaires, Risk Assessment Questionnaires, Data Audits and so on. With the ability to create your own questionnaires with branching logic, you can really leverage this tool in a lot of different ways. **What do you dislike about ZenGRC?** I have found that it is possible to get "lost" when drilling down into specific controls, where it is difficult to find my way back to where I started. Having said that, much of the pain we've experienced when using ZenGRC was due to us not using it properly and a quick call to our CSM is generally all that was needed to get us back on track. **What problems is ZenGRC solving and how is that benefiting you?** Our initial business driver was to help manage evidence collection for our ISO 27001 audits. We had been using spreadsheets for the IRL and manually sending emails to attempt to collect the evidence. Moving to ZenGRC cut the effort required to manage the evidence collection significantly and gave us better visibility into the status of each item. Over time, we have added an additional 5 frameworks to ZenGRC and this is where it really shines! Mapping common controls to multiple frameworks and applying the evidence across them is huge. Without a tool like this, managing 6 audits would be a nightmare for everyone involved. ### 27. Good product for streamlining the GRC processes **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** August 19, 2021 **What do you like best about ZenGRC?** Flexible risk assessment module, audit module, ready seed content, questionnaire constructor, SSO, helpful CSM **What do you dislike about ZenGRC?** Non-satisfactory issue support and bugfix, slow and often non-intuitive UI **What problems is ZenGRC solving and how is that benefiting you?** Automate risk, vendor, and audit management processes ### 28. ZenGRC - A powerful GRC Tool for any size organizaiton **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** August 30, 2021 **What do you like best about ZenGRC?** I like that I can customize ZenGRC to how my organization performs Governance, Risk, and Compliance activities. **What do you dislike about ZenGRC?** ZenGRC has so many customization options that I can see an organization that hasn't defined its processes yet getting lost in and making it more difficult for themselves. **Recommendations to others considering ZenGRC:** Make sure you participate in your onboarding. Ask questions, record the video sessions, save them for later reference. Also, make sure to train your users, spend the time to give them tips, tricks, and advice on how to improve their user experience. **What problems is ZenGRC solving and how is that benefiting you?** Providing a direct interface for our control owners to own their control, make updates/modifications, and raise a red flag to identified risks or if a control is failing. ### 29. Great compliance and audit tool, exceptionally good for internal audits, SOC2 and ISO **Rating:** 5.0/5.0 stars **Reviewed by:** Lija A. | S, Mid-Market (51-1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** Built-in features are great to use and works very well with audits. Easy to track issues and good place to store vendor documents **What do you dislike about ZenGRC?** Pretty good service, and great tool. No complaints Also very useful while getting your SOC2 and ISO certifications done. **Recommendations to others considering ZenGRC:** Great compliance tool. **What problems is ZenGRC solving and how is that benefiting you?** Issue creation , audits, easy to keep on target ### 30. Intuitive and Scalable **Rating:** 5.0/5.0 stars **Reviewed by:** Ashleigh G. | Program Manager (Security & Programs), Mid-Market (51-1000 emp.) **Reviewed Date:** August 19, 2021 **What do you like best about ZenGRC?** I love the bulk uploading tool, as someone who does multiple audits and mapping. Being able to bulk upload these requests and tasks have saved me a lot of time! **What do you dislike about ZenGRC?** For the multiple email notifications, i need to ensure I have company-wide communicated the audits before I assign requests and tasks. Otherwise, people are bombarded with notifications. **Recommendations to others considering ZenGRC:** I highly recommend using ZenGRC for your auditing needs with internal or external stakeholders. **What problems is ZenGRC solving and how is that benefiting you?** Communication and collaboration of Auditing, it has streamlined the workflow. ### 31. Clunky, but gets the job done **Rating:** 2.5/5.0 stars **Reviewed by:** Michael C. | Internal Security Audit Lead, Mid-Market (51-1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** Relationships across different system objects (e.g., risks, controls, vulnerabilities, assessments, issues, products, assets, etc.) are robust and intuitive **What do you dislike about ZenGRC?** Limited capabilities for customizing notifications. Additionally, the interface automatically opens new tabs on most clicks, quickly cluttering your browser. **What problems is ZenGRC solving and how is that benefiting you?** The tool encourages and enables users to think about risk management across an enterprise ### 32. GRC - Keeping it simple for a reasonable price **Rating:** 5.0/5.0 stars **Reviewed by:** Randy B. | Chief Information Security Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2021 **What do you like best about ZenGRC?** We are a start-up and we needed a quick and easy way to manage our ISMS and Compliance program. I've used other GRC products, ZenGRC made it simple, what I liked best was: - Working with Reciprocity, the onboard was organized, ISMS programs uploaded and customer success manager to make it successful - Using ZenGRC to managed the core of ISMS, service catalog, incidents, exceptions, vendor and customer requirements - No more looking for spreadsheets or documents - our program is active, accessible and managed. - An affordable solution for your needs. **What do you dislike about ZenGRC?** Two areas of improvement for the product that Reciprocity is addressing is more flexibility with access management and workflows on actions and issues. **What problems is ZenGRC solving and how is that benefiting you?** We needed a solution to manage ISMS and now we have an easy, accessible repository for our analysts, auditors and dashboards for our leaders. With our successes, we are planning to branch out into more around our overall Risk Management program - compliance, third-party, enterprise risk, etc. ### 33. It's an easy, intuitive and time-saving plaform **Rating:** 4.5/5.0 stars **Reviewed by:** Sophie B. | Senior Risk & Compliance Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2021 **What do you like best about ZenGRC?** Easy to onboard, train out and see effects from quickly. Getting off spreadsheets has been great. One quick win for us has been Issues/Tasks/Reminder emails functionality. That removed a lot of admin for the Compliance function with not much effort. We're not that far into our implementation, but we're finding it pretty painless so far. One of the comments I've had from operational areas is that it's easy to use and find what you need. This was so important to us when trailing different companies platforms, and I'm glad ZenGRC is so easy for people. The training material is useful too. The wiki is brilliant and I use it all the time. It's been so great having that resource available as you feel much more independent when using the software, you don't need to reach out to your account manager all that often. Everyone I've spoken to at ZenGRC throughout the process has been brilliant. Erica, my current Success Manger, is so easy to talk to and is quite to offer support and suggestions - even with our 9 hour time difference! **What do you dislike about ZenGRC?** I'd like to be able to format the dashboard more. For example, change colours, add commentary for each chart. I'd also like to be able to have more flexibility around permissions, but I know that's a huge piece of work you're on with, and from seeing the demonstration at the User Group last week, it's looking really good. There are training videos, but I think more of them would help. The wiki is amazing and full of great info, but sometimes a small video showing you how to do something is so useful. Especially to share with those in the business who aren't regular users of the platform. As a UK user of the platform, it would be great to have some UK-specific regulations transposed into the system. For example, in the UK, most financial services firms will need to follow specific rules outlined within the FCA Handbook. This is a huge piece of regulation for us to transpose, and something we'll absolutely do, but I do think it could be a real feature for ZenGRC if they had this already transposed for UK financial services firms. **Recommendations to others considering ZenGRC:** If you want something scalable and easy to use with a lot of features, this is it! **What problems is ZenGRC solving and how is that benefiting you?** 1. A single source of truth - no more spreadsheets, different versions and uncollaborative working. 2. No longer see things in isolation - whether that be regulatory frameworks, risks, controls, you see all everything mapped in ZenGRC. It helps the business have a greater understanding of how everything ties together. 3. Easy reporting. At a glance, point and click reports that are just *there*, we don't have to pull data and analyse it to get what we need. 4. Time saving - no more chaser emails, no more duplicate admin. It's saved us a lot of time. A key factor for us in using ZenGRC is that it's scalable. It suits are organisation now with sub-500 staff, and as the business grows we know ZenGRC can grow with us. We know we're not going to need a new system in 5 years. ### 34. Outstanding GRC Tool! **Rating:** 5.0/5.0 stars **Reviewed by:** Sean M. | Compliance Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2021 **What do you like best about ZenGRC?** It is easy to use, and the support from reciprocity is outstanding. They are there to help you every step of the way! There was a little bit of a learning curve at start-up, but Reciprocity was there to make sure everything worked properly. **What do you dislike about ZenGRC?** I cannot honestly think of anything that I dislike about using ZenGRC. Directing and completing audit and compliance functions have been much easier since we switched to using ZenGRC. **Recommendations to others considering ZenGRC:** Don't try to do too much at one time. Pick one compliance program to focus on when you start using the product. Once you have that down pat, you can start to roll in other programs. And take advantage of the help that Reciprocity will offer. They are very good at what they do, and they can help overcome any difficulties you might have in the rollout process. **What problems is ZenGRC solving and how is that benefiting you?** We used to run audits from spreadsheets and collect artifacts multiple times - and sometimes even misplace artifacts. No more! ZenGRC makes the audit process much easier to track. ### 35. What ZenGRC solution lacks in features and user experience customer account service makes up for **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Information Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** ZenGRC enables our business to manage our certification, risks, and compliance adherence in one place. It enables us to perform our internal audits/assessments by the department for all areas, therefore, minimizing disruption to our business. **What do you dislike about ZenGRC?** The ZenGRC Wiki and api interface data sets **Recommendations to others considering ZenGRC:** Develop use cases and use them in the implementation of ZenGRC, consult with the account manager and/or support desk prior to executing changes, and create the company Zen SOP for users/administrators. **What problems is ZenGRC solving and how is that benefiting you?** ZenGRC is allowing our business to manage multiple certifications (ISO, HITRUST, CMMI, CMMC, etc) by identifying the same requirements across these certification programs which reduces the number of controls to manage and able to test the control once which satisfy multiple program requirements/objectives. ### 36. You should evaluate ZenGRC during your search for a GRC solution **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** August 02, 2021 **What do you like best about ZenGRC?** I like the simplicity that everything is an object and that you can relate all objects to each other. **What do you dislike about ZenGRC?** Mapping can be very cumbersome and not always intuitive with what the system displays during the mapping. **What problems is ZenGRC solving and how is that benefiting you?** ZenGRC is a good standard GRC solution. Everything is an object that can be mapped to another object. It fulfills the need for a GRC system of record and allows the team to create processes and workflows. Some areas are lacking compared to other GRC solutions in the market, like asset discovery/integration and allowing a more straightforward process for non-GRC workflows. However, our experience has been positive, especially when compared to some of the more prominent players in the space. ### 37. The ZenGRC platform is great and easy to build out. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** September 29, 2021 **What do you like best about ZenGRC?** The thing I like best is the ease of functionality and dashboard options. The onboarding process and working with their implementation expert was the best! **What do you dislike about ZenGRC?** The only thing is that it opens up multiple windows. **Recommendations to others considering ZenGRC:** I would advise working with the implementation experts as they know the product inside and out. They are a great resource and were able to answer all the questions that we had. **What problems is ZenGRC solving and how is that benefiting you?** We are incorporating our vendor risk / third-party risk management and auditing control functions. ### 38. ZenGRC - From a newbie into InfoSec **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** September 07, 2021 **What do you like best about ZenGRC?** It's a tool that doesn't take long to master; I am a massive fan of its simplistic yet comprehensive design. **What do you dislike about ZenGRC?** I wish there were more automation, especially when it comes to vendor assessments. **Recommendations to others considering ZenGRC:** Ask the consultant to take you on a virtual walkthrough. Consider the work you do now and ask yourself, can this be done in ZenGRC. **What problems is ZenGRC solving and how is that benefiting you?** We used to store our risk assessment work locally. Now with ZenGRC, anybody can pick up the piece of work at any given time. ### 39. Okay for Unique Compliance Audit **Rating:** 3.5/5.0 stars **Reviewed by:** Jennifer P. | Internal Auditor II, Small-Business (50 or fewer emp.) **Reviewed Date:** January 27, 2021 **What do you like best about ZenGRC?** ZenGRC has provided my contract compliance team with its first ever compliance tool, which has been huge in collecting and retaining documentation for our quarterly compliance audits. With over 500 requirements our account team must comply with, Zen has allowed easier and more direct access to useful information for our business owners. As compliance is not always top of mind for them with their day to day work, the tasks feature has become very helpful in reminding them of our requirements without my team having to pester them with emails or follow up on every major requirement to ensure it is completed. Both sides have appreciated this! The Reciprocity team has been helpful and easy to work with. Since our compliance audits are not any of the standard ones, we had to add multiple new categories of information when setting up our account. Reciprocity worked closely with us so the tool could work for our purposes, and this customization ability for a reasonable price was a major reason why our team chose to use ZenGRC. **What do you dislike about ZenGRC?** Overall, the tool is not as flexible as I would prefer, but Reciprocity seems to be constantly working on updates. It is important to note that my team mostly works with the Audit Management section of ZenGRC; therefore, I do not care about Reciprocity's updates to the risk and threat sections (which currently seems to be going through the most changes). Our compliance audit is not one of the standards--SOC, SOX, etc--so how the Compliance Objects (programs, standards, sections, objectives, controls) are set up in the tool creates a lot of redundancy. In order for us to complete an assessment of a requirement after it being tested, we need to have a control and cannot tie it directly to an objective. Additionally, we were able to create custom attributes relevant to our needs, but are unable to hide or remove the standard attributes that do not apply to us. Regardless of the sections used, the tool has multiple ways of viewing information, which is good, but not all of them allow for column widths or the order of the columns to be changed for optimal viewing by the user. Additionally, the ability to filter and sort is not consistent between the audit view, objects list, and the to-do list, which can be frustrating. These features seem to be standard in most applications these days so I was disappointed with the limited flexibility. **Recommendations to others considering ZenGRC:** I can only really speak to the compliance audit management aspect of the tool so if that is what you are looking for, I would suggest looking more closely at ZenGRC. The way the Audit section is set up with the requests, assessments, issues and mapping to objectives/controls has been a huge plus to our team's efficiency. Additionally I expect the large amount of information able to be stored at our users' fingertips will be even more helpful with future audits as we have only exclusively used Zen for two quarterly audits thus far. When deciding if ZenGRC is the right tool for you, look into how much customization your team might need to implement for the tool to match the information you are wanting to collect and track. **What problems is ZenGRC solving and how is that benefiting you?** ZenGRC has provided my contract compliance team with its first ever compliance tool, which has been huge in collecting and retaining documentation for our quarterly compliance audits. Additionally, the tasks feature has become popular with our business owners for reminding them of requirements we must meet, which can be difficult to keep track of as there are over 500 contract requirements my team must comply with. Overall the benefits outweigh the negatives I have provided so our team is happy with our choice. The Reciprocity team is very responsive to users' needs so I would not be surprised if all of my current dislikes are resolved in the future. ### 40. I would recommend my friend or colleague to use ZenGRC, but there is still room for improvement **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** March 29, 2021 **What do you like best about ZenGRC?** I like that I can pick up the tool relatively quick. I like the different categories separated on the left panel in ZenGRC. The different categories separated make it easier to navigate through things and the categories are also easy to remember. I like that the ZenGRC UI is not complicated to use and everything is straight-forward. **What do you dislike about ZenGRC?** Alot of repetitive steps to get something done. For example, if I need to look at the attachments information for a control, rather than being able to get to the attachments directly from a control - I need to go to requests under mapped object --> find the control --> finding the attachments. The roles in ZenGRC is also too limited and/or not enough flexibility for modification to enforce certain access rights. For example, if a contributor is assigned a request, he or she is not able to re-assign the request to someone else. **What problems is ZenGRC solving and how is that benefiting you?** a central place to manage all the different audit programs and a place to track all the testing workpapers and evidences. Benefits: One central place to track things and can assign requests and keep track of things in one location. ### 41. Simple GRC Platform **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** ZenGRC is easy to onboard and navigate. I was able to figure out how the tools works by going through the training videos and wiki articles. Also, the customer support team is excellent and super helpful. Eric, our current Customer Success Manager, is super responsive and always there to answer my questions. **What do you dislike about ZenGRC?** I think the dashboard can be improved with more reporting options. Right now, we have to create custom reports in another tool given the limited options in ZenGRC. Additionally, mapping is a bit time consuming and I hope there is an easier way to do bulk updates. **What problems is ZenGRC solving and how is that benefiting you?** GRC is a good tool for small to medium-sized organizations. We use it to manage all our audits and other compliance-related assessments. ### 42. Helped streamline our audit and internal controls monitoring and reviews **Rating:** 4.5/5.0 stars **Reviewed by:** Heather T. | Enterprise (> 1000 emp.) **Reviewed Date:** January 13, 2021 **What do you like best about ZenGRC?** The layout of ZenGRC is easy to navigate and to see where you stand status wise with tasks and requests. You can easily pinpoint areas that need more focus. **What do you dislike about ZenGRC?** Trying to explain to our team the difference between the Tasks and the Audit Requests is a tiny bit confusing. But once I explain the difference, they are able to navigate their To Do items better. **Recommendations to others considering ZenGRC:** If you want a program to help you organize your controls environment and allow more visibility into the status of the controls, I recommend ZenGRC. It has helped us make our processes more streamlined and the evidence gathering process much faster and efficient. **What problems is ZenGRC solving and how is that benefiting you?** We are seeing areas or controls that users may be struggling with completing. We are also able to see how our controls are mapped to ISO easily and mapped to each other and our internal policies. ### 43. The ZenGRC implementation was effective and flexable to meet our needs. **Rating:** 4.5/5.0 stars **Reviewed by:** Raymond S. | Global Information Security Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** June 28, 2021 **What do you like best about ZenGRC?** I appreciated the clarity provided by the implementation expert and the flexibility to adjust to scheduling conflicts. **What do you dislike about ZenGRC?** The requirements to set up the instance was not clearly explained as to the amount of time required to enable the instance **Recommendations to others considering ZenGRC:** Get an estimate of time to be invested in the set-up. **What problems is ZenGRC solving and how is that benefiting you?** Addressing the need to provide the same evidence for multiple audits. ### 44. Massive tool to meet many needs **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2021 **What do you like best about ZenGRC?** That everything can be connected in one way or another if needed. It's pretty easy to navigate with multiple ways to view something. **What do you dislike about ZenGRC?** It is very easy to go down the wrong road and double work yourself. Once you understand how to use everything and how everything is already set, it is much easier to make changes. Multiple people kept trying to redo the controls needed for an audit while trying to help. **Recommendations to others considering ZenGRC:** I stongly recommend having help with the initial setup. It is easy to mess things up when you first start and are not completely familiar with everything. With one session, I was able to set up everything else without making it harder on myself! **What problems is ZenGRC solving and how is that benefiting you?** We are able to prep for audits using ZenGRC. This also gives us history of what was used and sufficient in previous audits. We are also looking into using it for Vendor Management and sending Questionnaires to customers. ### 45. Just starting our ZenGRC adventure, but already reaping the benefits **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Services | Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2021 **What do you like best about ZenGRC?** Full featured solution with lots of customization ability. UI is intuitive and flexible. Onboarding team has been excellent - we had an audit coming up two weeks from the time we purchased, so had to get everything up and ready to support the audit and were able to successfully do so. It took a lot of work on the backend from our implementation manager who was also helping to train us on how best to use the solution. While rushed on our end, this was a smooth and ultimately successful process. **What do you dislike about ZenGRC?** While we have been happy with the support team, one of our requests has required engineering efforts to resolve an issue that was one of the key features for us in the tool and it has not been resolved in 2+ weeks. We definitely understand that any effort involving engineering teams may take some extra time, but it has been a bit of a hindrance. **What problems is ZenGRC solving and how is that benefiting you?** The biggest instant problem that ZenGRC solved for us was easing the evidence collection for a SOC 2 audit. This has typically been a rather involved and time consuming process for us, but with ZenGRC, I am able to assign the evidence requests directly to the control owner, allow them to submit their own evidence, I review and send it on to our external auditors. Additionally, we didn't have the best solution for tracking enterprise risks, which Zen handles well. It also allows us to catalogue our controls and map them against the risks to help us better visualize and document our residual risk. ### 46. Comprehensive and user friendly GRC system **Rating:** 5.0/5.0 stars **Reviewed by:** JD D. | Information Security Compliance Administrator, Mid-Market (51-1000 emp.) **Reviewed Date:** April 09, 2021 **What do you like best about ZenGRC?** The system's tools are flexible and comprehensive, and the support has been very helpful in getting us started with a GRC platform. **What do you dislike about ZenGRC?** The system structure, while it makes sense, can be confusing as you continue to dive deeper into a record. Russian nesting dolls are how I would classify it. It can be easy to get lost as to where you are in the record until you learn to navigate it. **What problems is ZenGRC solving and how is that benefiting you?** We needed a GRC platform to help us get away from manually managing our policies and documentation. This system is going to accelerate our ISO 270001 submission significantly. ### 47. Decent workflow capability to meet basic needs, ability to customer end-user experience is limited **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Packaging and Containers | Mid-Market (51-1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** The ability for it to workflow requests to various users and system response times. Ability to set custom attributes as an admin for my needs. Logs changes and replaces the need for manual recordkeeping. **What do you dislike about ZenGRC?** Customization of end-user experience is minimal. Some settings are instance-wide and can't be set to a specific object. For example, unable to customize when I send out notifications to end-users and the ability to customize or modify the end-user experience. E.g., on the requests screen, the end-user only sees specific fields, and I can't add further context through additional fields/ attributes. **What problems is ZenGRC solving and how is that benefiting you?** Saving manual interactions with the business through the use of the tool. Now maintaining an audit log of changes. ### 48. ZenGRC & Me **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.) **Reviewed Date:** August 19, 2021 **What do you like best about ZenGRC?** The overall look and setup of the product. I like the setup of the screens. **What do you dislike about ZenGRC?** I do not like the relationship between Jira and ZenGRC. They do not work well together. There are many limitations, and I cannot use all the functionality of ZenGRC that it has to offer. **What problems is ZenGRC solving and how is that benefiting you?** I am able to easily keep track of requirements and evidence collected for our assesor. ### 49. ZenGRC Serves Well For SOX Testing **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Furniture | Mid-Market (51-1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** We are happy with the affordability and customizable nature of ZenGRC when it comes to testing SOX controls. **What do you dislike about ZenGRC?** While we can tailor the product to support our SOX testing needs, there are some aspects of the tool that seem better suited for other applications than how we are currently using it. **What problems is ZenGRC solving and how is that benefiting you?** We had multiple platforms and have consolidated all to ZenGRC, which has dramatically increased our reporting capabilities. ### 50. Easy to use GRC tool **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ZenGRC?** friendly UI, ease of administration, audit trail **What do you dislike about ZenGRC?** Mapping functions can be complex, setting up multiple audits can be challenging. **Recommendations to others considering ZenGRC:** It's a worthy contender in the GRC space and should really have a look if you are managing your compliance shop out of a spreadsheet. **What problems is ZenGRC solving and how is that benefiting you?** Automate audits and a single source of truth for all audit related items. Benefits include time saving and accuracy of records. ## ZenGRC Discussions - [Where is ZenGRC hosted?](https://www.g2.com/discussions/hosted-vs-on-premise-solution) - 2 comments, 1 upvote - [What does ZenGRC integrate with?](https://www.g2.com/discussions/integrations-910cde07-4528-42e0-b382-14d31e05e024) - 2 comments, 1 upvote - [Can I run an audit in ZenGRC?](https://www.g2.com/discussions/running-audits) - 2 comments, 1 upvote - [Is it possible to import or export data from ZenGRC?](https://www.g2.com/discussions/importing-exporting-data) - 2 comments, 1 upvote - [What compliance frameworks does ZenGRC support?](https://www.g2.com/discussions/compliance-frameworks) - 1 comment, 1 upvote - [View ZenGRC pricing details and edition comparison](https://www.g2.com/products/zengrc/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-09+20%3A33%3A24+-0500&secure%5Bsession_id%5D=10e878b9-1419-41a4-9a6b-dd6eecc966ba&secure%5Btoken%5D=509d01e2253ac3a51f48bd8fcaa7cc6e51274ad3995610383098b92f48dffa09&format=llm_user) ## ZenGRC Features **Generative AI** - AI Text Generation **Generative AI** - AI Text Summarization - AI Text Generation **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Planning & Scheduling **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Monitoring - IT Risk Management** - AI Monitoring **Risk Management** - Risk Identification - Risk Classification - Risk Methodology - Goals Monitoring **Documentation - Audit Management** - Templates & Forms - Checklists **Agentic AI - IT Risk Management** - Autonomous Task Execution - Multi-step Planning **Reporting & Analytics - Audit Management** - Dashboard - Audit Performance - Industry Compliance **Business Continuity Management** - Recovery Plans - Procedure Templates - Crisis Management **Generative AI** - AI Text Generation - AI Text Summarization **Platform** - Integration - Security & Privacy - Mobile Access - Flexibility **Services** - Implementation - Training & Learning - Customer Support - Professional Services ## Top ZenGRC Alternatives - [Optro](https://www.g2.com/products/optro/reviews) - 4.6/5.0 (1,584 reviews) - [LogicGate Risk Cloud](https://www.g2.com/products/logicgate-risk-cloud/reviews) - 4.6/5.0 (188 reviews) - [Archer](https://www.g2.com/products/archer-technologies-archer/reviews) - 3.6/5.0 (17 reviews)