C1Risk

The ability to connect the various facets of your risk program in one place and in a logical way is simply awesome. It's a tool you can use to identify, measure, control, and mitigate risks all in a linear and consistent fashion. It enables a level of program maturity that was previously out of reach for many organizations.

I'll get back to you on that one. Thus far, anything I have found missing or lacking is already on their roadmap and soon to be implemented.

We are a law firm in our second year of working with CyberOne for ISO Certification, Access Review, and Contract Management. One of the many attributes of this platform is that it has enabled us to manage a variety of projects on a single platform. We are currently in surveillance audits for ISO 27001 certification, our quarterly access review process is automated on CyberOne, we are building a complex contract management program and evaluating further use cases.

Perhaps the biggest benefit to the product is that we have access to the full platform and all modules for a single price, so we can budget effectively and scale our program with CyberOne without any hidden costs or budget surprises. The modules are also all integrated so we connect all of our policies, controls, and ultimately all our risk and compliance in this platform.

Specifically, regarding our compliance and audit needs, the automated evidence collection process in CyberOne has worked really well and helped us expedite our audits. We were able to conduct our audit on-screen with our auditor, using CyberOne. Beyond ISO, CyberOne has also provided us with crosswalks to other frameworks, which they manage and update. It is great to know that we can build our risk register, manage findings and manage third-party risk assessments on this platform. We are excited to see all we can do!

Because the tool is so robust, early on with the onboarding, I sometimes would find myself on the wrong page - nothing that a little time and familiarizing myself couldn't resolve.

The software is versatile, in that you can manage your own dashboard to your specific needs of the business. It allows you to have several dashboards available to work with during the many phases of an audit with ease of gathering and presenting documentation professionally.
With the online training it was easy to get started, and figure out what your needs were. It allows you to grow as you build and make changes as you build and not impact the final outcome.
CyberOne Support were fantastic in providing training and answering any questions I had. They were willing to work with us and ensure the product served our needs.

There is nothing I can say bad about the software. The developers were quick to respond and help solve any issues we had.