Bert Kondruss, KonBriefing Research, Germany

Compare GRC software interactively

Advertisement
The data is based on information provided by the respective vendors. This overview is intended to give you an initial orientation. However, you should not make a procurement decision based solely on this data. We advise you to obtain binding information and offers from the respective suppliers first.
Beta version, data may be incomplete.
1 Select topic 🡻
GRCPca858
ProductPca112
GRC DomainsPca966
StandardsPca913
Risk ManagementPca995
Internal ControlsPca413
Information Security / ISMSPca236
Data PrivacyPca87
Third Party ManagementPca534
ResiliencePca97
CompliancePca170
Audit ManagementPca559
General GRC FunctionsPca244
ControlsPca798
Policy ManagementPca18
Task ManagementPca984
Incident ManagementPca696
AI functionsPca672
Trust PortalPca164
TrainingPca562
PlatformPca854
IntegrationsPca841
CustomizabilityPca864
Other solutionsPca775
OfferingPca883
RegionsPca111
ProvisioningPca859
VendorPca807
CompanyPca459
CertificationsPca838
2 Compare capabilities
GRC
Product information. Select a subcategory.
Basic GRC functional areas. Please select a subcategory.
Features that support multiple GRC domains.
What features and capabilities does the platform on which the system is built have?
Other solution areas in the same product or on the same platform.
Information about the entire offer, please select a subcategory.
In which regions is the solution offered or available?
Is the software deployed via the cloud (SaaS) or can it also be installed in your own data center (on-premises)?
General information about the vendor.
Relevant certifications or audits of the product or the company
Pca858Pca858
Product
Product information. Select a subcategory.
Basic GRC functional areas. Please select a subcategory.
Which standards do the products support?
Enterprise Risk Management (ERM), Operational Risk Management (ORM), IT Risk Management, Cyber Risk Management
Information security management systems, e.g. according to ISO 27001 or SOC2.
Functions to manage vendors.
Resilience Planning, Business Continuity Management (BCM), Crisis Management
Compliance with legal regulations and internal guidelines.
Planning and conducting internal audits.
Features that support multiple GRC domains.
Additional information on the standards or frameworks included and their controls as well as on the mappings between them.
Filing and management of regulations and guidelines.
Manage and track tasks.
Functions for handling incidents, e.g. data protection incidents.
Features with Artificial Intelligence
Ability for third parties to access content, such as certifications.
What features and capabilities does the platform on which the system is built have?
Possibilities for integration with other systems
How can the product be adapted to the customer’s specific requirements?
Other solution areas in the same product or on the same platform.
Pca112Pca112
GRC Domains
Basic GRC functional areas. Please select a subcategory.
Which standards do the products support?
Enterprise Risk Management (ERM), Operational Risk Management (ORM), IT Risk Management, Cyber Risk Management
Information security management systems, e.g. according to ISO 27001 or SOC2.
Functions to manage vendors.
Resilience Planning, Business Continuity Management (BCM), Crisis Management
Compliance with legal regulations and internal guidelines.
Planning and conducting internal audits.
Pca966Pca966
Standards
Standards supported by the products. This information is generally incomplete. Support varies depending on the product and standard.
Pca913Pca913
Risk Management
Enterprise Risk Management (ERM), Operational Risk Management (ORM), IT Risk Management, Cyber Risk Management
Pca995Pca995
Internal Controls
Pca413Pca413
Information Security / ISMS
Information security management systems, e.g. according to ISO 27001 or SOC2.
Pca236Pca236
Data Privacy
Pca87Pca87
Third Party Management
Functions to manage vendors.
Pca534Pca534
Resilience
Resilience Planning, Business Continuity Management (BCM), Crisis Management
Pca97Pca97
Compliance
Compliance with legal regulations and internal guidelines.
Pca170Pca170
Audit Management
Planning and conducting internal audits.
Pca559Pca559
General GRC Functions
Features that support multiple GRC domains.
Additional information on the standards or frameworks included and their controls as well as on the mappings between them.
Filing and management of regulations and guidelines.
Manage and track tasks.
Functions for handling incidents, e.g. data protection incidents.
Features with Artificial Intelligence
Ability for third parties to access content, such as certifications.
Pca244Pca244
Controls
Additional information on the standards or frameworks included and their controls as well as on the mappings between them.
Pca798Pca798
Policy Management
Filing and management of regulations and guidelines.
Pca18Pca18
Task Management
Manage and track tasks.
Pca984Pca984
Incident Management
Functions for handling incidents, e.g. data protection incidents.
Pca696Pca696
AI functions
Features with Artificial Intelligence
Pca672Pca672
Trust Portal
Ability for third parties to access content, such as certifications.
Pca164Pca164
Training
Pca562Pca562
Platform
What features and capabilities does the platform on which the system is built have?
Possibilities for integration with other systems
How can the product be adapted to the customer’s specific requirements?
Pca854Pca854
Integrations
Possibilities for integration with other systems
Pca841Pca841
Customizability
Possibilities to adapt the system to specific data and process requirements.
Pca864Pca864
Other solutions
Other solution areas in the same product or on the same platform.
Pca775Pca775
Offering
Information about the entire offer, please select a subcategory.
In which regions is the solution offered or available?
Is the software deployed via the cloud (SaaS) or can it also be installed in your own data center (on-premises)?
Pca883Pca883
Regions
In which regions is the solution offered or available?
Pca111Pca111
Provisioning
Is the software deployed via the cloud (SaaS) or can it also be installed in your own data center (on-premises)?
Pca859Pca859
Vendor
General information about the vendor.
Relevant certifications or audits of the product or the company
Pca807Pca807
Company
General information about the vendor.
Pca459Pca459
Certifications
Relevant certifications or audits of the product or the company
Pca838Pca838
Produkt /
Anbieter		MerkmalPrdIdPcaKeys
Archer
Archer Technologies		Prd687832PcaAll Pca236 Pca534 Pca696 Pca913 Pca87 Pca170 Pca864 Pca459 Pca995 Pca97 Pca859 Pca672 Pca775 Pca18 Pca559
Corporater
Corporater AS		Prd679221PcaAll Pca459 Pca97 Pca995 Pca838 Pca413 Pca841 Pca859 Pca534 Pca984 Pca775 Pca559 Pca236 Pca696 Pca913 Pca18 Pca87
CRISAM
CALPANA business consulting GmbH		Prd928900PcaAll Pca18 Pca841 Pca995 Pca559 Pca459 Pca87 Pca864 Pca236 Pca111 Pca97 Pca798 Pca775 Pca859 Pca534 Pca913 Pca170 Pca413 Pca672
Formalize
Formalize ApS		Prd110238PcaAll Pca534 Pca859 Pca838 Pca164 Pca775 Pca459 Pca696 Pca672 Pca913 Pca18 Pca87 Pca864 Pca236 Pca995 Pca841 Pca111 Pca984
GRC Toolbox
Swiss GRC AG		Prd779760PcaAll Pca459 Pca696 Pca984 Pca534 Pca672 Pca413 Pca111 Pca97 Pca838 Pca87 Pca995 Pca559 Pca18 Pca236 Pca859 Pca913 Pca775 Pca798 Pca170
SAI360
SAI360 Inc.		Prd739711PcaAll Pca995 Pca413 Pca97 Pca459 Pca798 Pca562 Pca559 Pca170 Pca696 Pca534 Pca236 Pca18 Pca672 Pca841 Pca913
Vanta
Vanta Inc.		Prd967689PcaAll Pca841 Pca913 Pca534 Pca87 Pca18 Pca236 Pca798 Pca995 Pca164 Pca859 Pca459 Pca672

Products

https://www.archerirm.com/
https://corporater.com/
https://crisam.net/en/
https://formalize.com/en
https://swissgrc.com/en/
https://www.vanta.com/

Evaluate and select GRC tools

Find the optimal tool methodically
This site wants to help you to find the right software for your requirements in a structured way. On the following pages you will find step-by-step instructions for tool selection as well as market overviews and comparisons. First, select the management discipline you want to use:
Information Security Management System (ISMS)

General approach to selecting a standard software

Shaping a competent selection process
Here you will find additional knowledge to carry out the tool selection competently and reliably, even if you don't do it very often.
Selecting a GRC software