Risk Cloud Exchange

AI Use Case Management

Centralize and automate your AI governance processes

AI Use Case Management

Centralize and automate your AI governance processes

Enterprise Risk Management

Identify and evaluate emerging risks for decisive action

Enterprise Risk Management

Identify and evaluate emerging risks for decisive action

Third-Party Risk Management: Standard

Efficiently assess and mitigate third-party risk in one secure, centralized platform

Third-Party Risk Management: Standard

Efficiently assess and mitigate third-party risk in one secure, centralized platform

Third-Party Risk Management: SIG Lite

Centralize Your Approach to SIG Lite Risk Management

Third-Party Risk Management: SIG Lite

Centralize Your Approach to SIG Lite Risk Management

Third-Party Risk Management: ISO 27001

Get Ahead of Third-Party Risks and Accelerate the Onboarding Process

Third-Party Risk Management: ISO 27001

Get Ahead of Third-Party Risks and Accelerate the Onboarding Process

Third-Party Compromise Assessment

Protect your firm from external vulnerabilities

Third-Party Compromise Assessment

Protect your firm from external vulnerabilities

Internal Audit Management

Never sweat an audit cycle

Internal Audit Management

Never sweat an audit cycle

Cyber Risk Management

Identify, assess, and mitigate cyber risk

Cyber Risk Management

Identify, assess, and mitigate cyber risk

Controls Compliance

Identify and evaluate control effectiveness

Controls Compliance

Identify and evaluate control effectiveness

Regulatory Compliance

Stay compliant with the ever-evolving regulatory landscape

Regulatory Compliance

Stay compliant with the ever-evolving regulatory landscape

Regulatory Exam Management

Simplify the path to regulatory exam readiness

Regulatory Exam Management

Simplify the path to regulatory exam readiness

Regulatory Compliance Powered by Ascent

Streamline your regulatory compliance program with Ascent

Regulatory Compliance Powered by Ascent

Streamline your regulatory compliance program with Ascent

Data Subject & Consumer Rights Requests

Stay Compliant With Data Privacy Requirements

Data Subject & Consumer Rights Requests

Stay Compliant With Data Privacy Requirements

Data Processing Activities & DPIAs: GDPR

Stay ahead of GDPR requirements

Data Processing Activities & DPIAs: GDPR

Stay ahead of GDPR requirements

Data Inventory Management

Stay organized and compliant with data privacy regulations

Data Inventory Management

Stay organized and compliant with data privacy regulations

SOX Compliance

Centralize and automate SOX compliance

SOX Compliance

Centralize and automate SOX compliance

GDPR

Uphold EU data privacy requirements

GDPR

Uphold EU data privacy requirements

CCPA

Stay compliant with California consumer privacy requirements

CCPA

Stay compliant with California consumer privacy requirements

Enterprise Risk Statement

Deploy controls to help mitigate industry-specific risks

Enterprise Risk Statement

Deploy controls to help mitigate industry-specific risks

Policy & Procedure Management

Centralize policy creation, revision, review, and approval

Policy & Procedure Management

Centralize policy creation, revision, review, and approval

Policy Acknowledgments

Centralize employee policy management, acknowledgment, and compliance workflows

Policy Acknowledgments

Centralize employee policy management, acknowledgment, and compliance workflows

Issues Management

Simplify remediation of issues across your organization

Issues Management

Simplify remediation of issues across your organization

Tenable

Gain visibility into your organization’s vulnerabilities and prioritize remediations

Tenable

Gain visibility into your organization’s vulnerabilities and prioritize remediations

ISO 27701

Practical Privacy Guidance

ISO 27701

Practical Privacy Guidance

NIST 800-53

Protect the security and privacy of federal government information

NIST 800-53

Protect the security and privacy of federal government information

CIS Controls

Establish world-class cybersecurity measures against any threat

CIS Controls

Establish world-class cybersecurity measures against any threat

ServiceNow - Assets

Identify and mitigate asset vulnerabilities

ServiceNow - Assets

Identify and mitigate asset vulnerabilities

Black Kite - TPRM

Stay ahead of third-party risks with real-time, quantitative risk intelligence

Black Kite - TPRM

Stay ahead of third-party risks with real-time, quantitative risk intelligence

Vital4

Proactively screen and monitor third-party risk

Vital4

Proactively screen and monitor third-party risk

RiskRecon by Mastercard

Get proactive with full insights into your third-party risks

RiskRecon by Mastercard

Get proactive with full insights into your third-party risks

Incident Management

Limit risk exposure with automated incident management

Incident Management

Limit risk exposure with automated incident management

Business Continuity Management

Prepare your business against sudden disruption

Business Continuity Management

Prepare your business against sudden disruption

Business Impact Analysis

Recover from incidents faster

Business Impact Analysis

Recover from incidents faster

Risk Cloud Quantify®

Quantify risk into financial impact

Risk Cloud Quantify®

Quantify risk into financial impact

OpenAI

Automate and inform manual GRC workflows

OpenAI

Automate and inform manual GRC workflows

Jira

Streamline issue management across your organization

Jira

Streamline issue management across your organization

Secure Controls Framework (SCF)

Streamline compliance requirements across your organization

Secure Controls Framework (SCF)

Streamline compliance requirements across your organization

Model Risk Management

Building the right foundation for financial success

Model Risk Management

Building the right foundation for financial success

SecurityScorecard

Assess risk with full visibility into your vendors' cybersecurity posture

SecurityScorecard

Assess risk with full visibility into your vendors' cybersecurity posture

Risk Cloud Documents™

Automate your documentation processes

Risk Cloud Documents™

Automate your documentation processes

NIST Cybersecurity Framework (CSF)

Reduce cybersecurity risk for critical infrastructure projects

NIST Cybersecurity Framework (CSF)

Reduce cybersecurity risk for critical infrastructure projects

Google Drive

Streamline document creation and management

Google Drive

Streamline document creation and management

Sharepoint

Centralize document storage and streamline collaboration

Sharepoint

Centralize document storage and streamline collaboration

DocuSign

Automate electronic agreements and centralize record storage

DocuSign

Automate electronic agreements and centralize record storage

Information Security Policy

A head start for Information Security Policies

Information Security Policy

A head start for Information Security Policies

Ascent

Continuously monitor and stay compliant with relevant regulatory obligations

Ascent

Continuously monitor and stay compliant with relevant regulatory obligations

ServiceNow - Tickets

Streamline ticketing workflows across your tech stack

ServiceNow - Tickets

Streamline ticketing workflows across your tech stack

Digital Operational Resilience Act (DORA)

Detect and recover from information and communication technology incidents

Digital Operational Resilience Act (DORA)

Detect and recover from information and communication technology incidents

NIS2 Directive

Enhance your network and information system’s security

NIS2 Directive

Enhance your network and information system’s security

NIST AI Risk Management (NIST AI RMF)

Build and manage trustworthy AI systems

NIST AI Risk Management (NIST AI RMF)

Build and manage trustworthy AI systems

SOC 2 Compliance

Ensure customer data privacy and security

SOC 2 Compliance

Ensure customer data privacy and security

Secure Controls Framework (SCF) Assessment

Assess cybersecurity control effectiveness

Secure Controls Framework (SCF) Assessment

Assess cybersecurity control effectiveness

HITRUST Assessment

Increase data protection and cybersecurity assurance

HITRUST Assessment

Increase data protection and cybersecurity assurance

NIST CSF Assessment

Assess and strengthen your cybersecurity posture

NIST CSF Assessment

Assess and strengthen your cybersecurity posture

CMMC Self Assessment

Assess CMMC certification readiness

CMMC Self Assessment

Assess CMMC certification readiness

FFIEC CAT Assessment

Determine cyber preparedness

FFIEC CAT Assessment

Determine cyber preparedness

OSFI Cyber Security Self-Assessment

Assess your cyber preparedness

OSFI Cyber Security Self-Assessment

Assess your cyber preparedness

Consumer Financial Protection Bureau Self Assessment (CFPB)

Identify potential consumer risks

Consumer Financial Protection Bureau Self Assessment (CFPB)

Identify potential consumer risks

CSA Cloud Controls Matrix

Assess and secure your cloud infrastructure

CSA Cloud Controls Matrix

Assess and secure your cloud infrastructure

Microsoft Azure

Simplify platform access and user provisioning

Microsoft Azure

Simplify platform access and user provisioning

Okta

Streamline user provisioning and access management

Okta

Streamline user provisioning and access management

Physical Security Management

Connect Physical Security Risk to Business Impact

Physical Security Management

Connect Physical Security Risk to Business Impact

SFTP

Securely consume and parse data with the Risk Cloud SFTP Connector

SFTP

Securely consume and parse data with the Risk Cloud SFTP Connector

Everbridge

Centralize and automate incident management workflows

Everbridge

Centralize and automate incident management workflows

Monday.com

Centralize and streamline issues management

Monday.com

Centralize and streamline issues management

Snowflake

Centralize and automate your GRC data and workflows

Snowflake

Centralize and automate your GRC data and workflows

Mandiant

Centralize and streamline issues and remediations

Mandiant

Centralize and streamline issues and remediations

Rapid7

Identify and remediate high-risk vulnerabilities

Rapid7

Identify and remediate high-risk vulnerabilities

Whistic

Streamline and centralize your third-party vendor data

Whistic

Streamline and centralize your third-party vendor data

Workday - TPRM

Centralize and automate vendor repository management

Workday - TPRM

Centralize and automate vendor repository management

Formstack Go

Capture GRC data from any location

Formstack Go

Capture GRC data from any location

Workday - Employee Information

Automate GRC workflows with employee data

Workday - Employee Information

Automate GRC workflows with employee data

Black Kite - Compliance Ratings

Streamline third-party compliance assessments

Black Kite - Compliance Ratings

Streamline third-party compliance assessments

Prisma Cloud

Centralize and streamline findings and remediations

Prisma Cloud

Centralize and streamline findings and remediations

VISO Trust

Streamline risk assessments with third-party risk scores

VISO Trust

Streamline risk assessments with third-party risk scores

FedRAMP SSP Premium

Generate your FedRAMP SSP with one click

FedRAMP SSP Premium

Generate your FedRAMP SSP with one click

Qualys

Automate and streamline vulnerability assessment and mitigation

Qualys

Automate and streamline vulnerability assessment and mitigation

Adobe Sign

Automate and centralize electronic agreements

Adobe Sign

Automate and centralize electronic agreements

NetSuite - TPRM

Streamline and centralize your third-party risk assessment and approval process

NetSuite - TPRM

Streamline and centralize your third-party risk assessment and approval process

NetSuite - Expense Reports

Streamline and centralize expense approval processes

NetSuite - Expense Reports

Streamline and centralize expense approval processes

CrowdStrike

Identify and remediate high-risk vulnerabilities

CrowdStrike

Identify and remediate high-risk vulnerabilities

KPI

Track and report GRC program effectiveness

KPI

Track and report GRC program effectiveness

SCF Evidence Request

Streamline SCF, cybersecurity, and privacy control evidence requests

SCF Evidence Request

Streamline SCF, cybersecurity, and privacy control evidence requests

NIST SP 800-30 Threats

Prevent, identify, and track cyber threats

NIST SP 800-30 Threats

Prevent, identify, and track cyber threats

NIST Secure Software Development

Implement secure software development practices to reduce vulnerabilities

NIST Secure Software Development

Implement secure software development practices to reduce vulnerabilities

NIST Privacy

Manage privacy risk to protect consumer privacy

NIST Privacy

Manage privacy risk to protect consumer privacy

Exceptions Management

Minimize Business Risk with Centralized Exceptions Management

Exceptions Management

Minimize Business Risk with Centralized Exceptions Management

Google Looker

Visualize your data and unlock deeper insights

Google Looker

Visualize your data and unlock deeper insights

ISO 27017

Securely provision and use cloud services

ISO 27017

Securely provision and use cloud services

UCF

Automate and streamline cross-framework control compliance

UCF

Automate and streamline cross-framework control compliance

Salesforce

Automate GRC workflows as Salesforce data changes

Salesforce

Automate GRC workflows as Salesforce data changes

Transfer Impact Assessments

Assess and mitigate international data transfer risks

Transfer Impact Assessments

Assess and mitigate international data transfer risks

Microsoft Teams

Improve response rates and collaboration with program stakeholders

Microsoft Teams

Improve response rates and collaboration with program stakeholders

PCI DSS Compliance

Centralize PCI DSS requirements and accelerate assessment readiness

PCI DSS Compliance

Centralize PCI DSS requirements and accelerate assessment readiness

Penetration Testing

Uncover and mitigate vulnerabilities faster

Penetration Testing

Uncover and mitigate vulnerabilities faster

Microsoft 365

Manage and edit documents inside Risk Cloud

Microsoft 365

Manage and edit documents inside Risk Cloud

Asset Management

A systematic approach to keeping track of assets

Asset Management

A systematic approach to keeping track of assets

Vulnerability Management

Monitor, assess, and mitigate vulnerability impact

Vulnerability Management

Monitor, assess, and mitigate vulnerability impact

SOC 2 Trust Services Criteria

Secure customer data with SOC 2 certification

SOC 2 Trust Services Criteria

Secure customer data with SOC 2 certification

FedRAMP

Help protect data when providing services to the federal government

FedRAMP

Help protect data when providing services to the federal government

SCF Threats

Defend against common threats

SCF Threats

Defend against common threats

SCF Risks

Deploy controls to help mitigate risks

SCF Risks

Deploy controls to help mitigate risks

CMMC: Cybersecurity Maturity Model Certification

Help uphold national security when working with the DoD

CMMC: Cybersecurity Maturity Model Certification

Help uphold national security when working with the DoD

Australian ISM Guidelines

Comply with Australian cybersecurity guidelines

Australian ISM Guidelines

Comply with Australian cybersecurity guidelines

Procurement & Contract Management

Streamline vendor management from first touch to setup

Procurement & Contract Management

Streamline vendor management from first touch to setup

ISO 27002

Secure your data with the ISO 27002 international controls framework

ISO 27002

Secure your data with the ISO 27002 international controls framework

ISO 27001

Leverage ISO 27001 to secure your data

ISO 27001

Leverage ISO 27001 to secure your data

ISO 27018

Protect personally identifiable information in any cloud environment

ISO 27018

Protect personally identifiable information in any cloud environment

Payment Card Industry Data Security Standard (PCI DSS)

Protect your cardholder data and improve the security of electronic payments

Payment Card Industry Data Security Standard (PCI DSS)

Protect your cardholder data and improve the security of electronic payments

NIST 800-171

Help ensure full security and confidentiality of sensitive information

NIST 800-171

Help ensure full security and confidentiality of sensitive information

HIPAA Security Standards

Help prevent healthcare data breaches and ensure safety of patient data

HIPAA Security Standards

Help prevent healthcare data breaches and ensure safety of patient data

HITRUST CSF

A framework to secure your sensitive information

HITRUST CSF

A framework to secure your sensitive information

23 NYCRR 500

Protect consumer data privacy at financial services institutions

23 NYCRR 500

Protect consumer data privacy at financial services institutions

FFIEC CAT

Assess cybersecurity threats and readiness using federal controls

FFIEC CAT

Assess cybersecurity threats and readiness using federal controls

Slack

Collaborate with risk owners on a familiar platform

Slack

Collaborate with risk owners on a familiar platform

Microsoft Power BI

Visualize your data and unlock deeper insights

Microsoft Power BI

Visualize your data and unlock deeper insights

Zapier

Automate connections between Risk Cloud and more than 2,000 applications

Zapier

Automate connections between Risk Cloud and more than 2,000 applications

LogicGate Learning Application

Complete Courses at learning.logicgate.com

LogicGate Learning Application

Complete Courses at learning.logicgate.com

Agility Build Bash 2024

Navigate your way to Planet Agility

Agility Build Bash 2024

Navigate your way to Planet Agility