Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Good product
What do you like best about the product?
CyberGRx helps our org to address risks.
What do you dislike about the product?
nothing as such it gives an overall idea of our risks
What problems is the product solving and how is that benefiting you?
all problems related to third party risk assessment
- Leave a Comment |
- Mark review as helpful
Timely resolutions to acknowledged platform shortfalls.
What do you like best about the product?
CyberGRX is an excellent tool for flat companies that offer one primary product, service, and/or solution. I can see companies being able to leverage the test once they use many approach.
What do you dislike about the product?
The platform is not built for complex business structures that offer an array of products, services, and/or solutions. As such, there are a lot of challenges in using the platform.
What problems is the product solving and how is that benefiting you?
CyberGRX has the potential to reduce the number of questionaries and/or audits outside of the financial industry.
The future of third party cyber risk management
What do you like best about the product?
CyberGRX offers us a cost-efficient, state-of-the-art means to manage third-party cyber risk. Specifically, we appreciate an ability to perform efficient procurement with predictive analytics, analyze our portfolio using a common threat or compliance framework, and ensure that the residual risk we report maps to the actual use of the services for a given third party.
What do you dislike about the product?
Not all customers or vendors leverage the portfolio. This means some percentage of third-party diligence must be conducted using inefficient legacy approaches (outside the CyberGRX portal) that don't lend themselves to structured data analysis or cyber risk intelligence. We wish we could stop the SOC2 review and risk acceptance processes that wrap around our use of the CyberGRX portal.
What problems is the product solving and how is that benefiting you?
CyberGRX enables us to accelerate our procurement process as a consumer of technology and services. Further, the platform enables us to simplify/shorten our sales cycle as a vendor of services. Having a measurable third-party cyber risk platform helps us efficiently pass our annual audits, including PCI, HIPAA, HITRUST, SOC1/2, and ISO27001. Without CyberGRX, there is no way we would be able to perform robust benchmarking and diligent third-party risk analysis, given a limited set of resources.
CyberGRX
What do you like best about the product?
the ability to central these third party assessment in one place with the ability to reuse to gain effiencies
What do you dislike about the product?
The ability to track customer usage of Cisco CyberGRX assessment to show return on investment. The inability to poll the exchange in the event of a security event.
What problems is the product solving and how is that benefiting you?
The one to many problem. The reuse of one assessment dozens of times over. The value the exchange provides drives consistency in industry.
Great platform, and real dedication to evolving.
What do you like best about the product?
The flexibility of the CyberGRX module and the expanding capabilities that are being added on a routine basis make the platform and tool fit for multiple use cases and scenarios. In most cases, when I realize I need a capability in this space, CyberGRX already has a road map and a direction to get there.
What do you dislike about the product?
I haven't found anything that isn't valuable within the platform, so this is a bit of a stretch, but I would say that adoption is the only real shortfall. Once organizations get a good feel for what CyberGRX is doing, they tend to buy-in well.
What problems is the product solving and how is that benefiting you?
Currently, we are using it for our initial security assessment of a vendor/third party, but the most intriguing part of that is understanding our third-party attack surface across specific attack vectors or vulnerabilities.
Third party risk management platform
What do you like best about the product?
User-friendly interface, Seemless exchange of information w.r.t. risks posed by third parties, Wholistic view of cybersecurity maturity of the third parties
What do you dislike about the product?
Requirement of specific personnel contact information to proactively share assessment results with client
What problems is the product solving and how is that benefiting you?
Managing the risks posed by third parties, utilization of CyberGRX platform instead of filling up multiple questionnaires of different clients
Extremely dedicated team of security professionals.
What do you like best about the product?
The ability to take the most tedious aspects of third-party risk management and return insights with little to no effort, leaving our internal team free to dive into matters that may pose a risk to the business.
What do you dislike about the product?
CyberGRX provides various excellent options for mapping standards and controls, what would be nice would be a way to systemically map controls to an organizations pre-established questionnaire(s).
What problems is the product solving and how is that benefiting you?
The ability to take the most tedious aspects of third-party risk management and return insights with little to no effort, leaving our internal team free to dive into matters that may pose a risk to the business.
Questionnaires are detailed, lengthy time investment but there is RIO value in reuse of responses
What do you like best about the product?
There is RIO value to vendors completing lengthy questionnaire responses (200+ questions) when allowing the reuse of responses for other parties seeking vendor diligence on your company.
What do you dislike about the product?
It is not obvious to the outside observer what the 1, 2, 3 assessment tiering level represents on companies' completed response. It should be made clear which level is self-attestation only and which has evidence or validation of responses.
What problems is the product solving and how is that benefiting you?
I salute CyberGRX for trying to solve the inefficiency in TPRA third-party risk assessment. They appear to be trying to address the problem associated with sunk cost time investment in responding to differing and varying TPRA questions.
Third Party Assessment Is Great
What do you like best about the product?
Third party security assessment is excellent
What do you dislike about the product?
user experience is not so good, sometimes i cannot get notification email.
What problems is the product solving and how is that benefiting you?
when customer come with security questions or concerns, it is difficult for us to prove it by ourselves, CyberGRX helps to solve it.
Have been using CyberGRX for many years, it's an excellent platform and really helped drive change
What do you like best about the product?
I really love the concept of an exchange where vendors all use the same form to provide risk feedback
What do you dislike about the product?
We need to get the industry to adopt this process overall and stop sending paper forms or spreadsheets
What problems is the product solving and how is that benefiting you?
Streamlining the review process and giving us a platform to compare vendors on a consistent basis
showing 1 - 10