CyberGRX Reviews

Third party security assessment is excellent

user experience is not so good, sometimes i cannot get notification email.

when customer come with security questions or concerns, it is difficult for us to prove it by ourselves, CyberGRX helps to solve it.

The flexibility of the CyberGRX module and the expanding capabilities that are being added on a routine basis make the platform and tool fit for multiple use cases and scenarios. In most cases, when I realize I need a capability in this space, CyberGRX already has a road map and a direction to get there.

I haven't found anything that isn't valuable within the platform, so this is a bit of a stretch, but I would say that adoption is the only real shortfall. Once organizations get a good feel for what CyberGRX is doing, they tend to buy-in well.

Currently, we are using it for our initial security assessment of a vendor/third party, but the most intriguing part of that is understanding our third-party attack surface across specific attack vectors or vulnerabilities.

The ability to take the most tedious aspects of third-party risk management and return insights with little to no effort, leaving our internal team free to dive into matters that may pose a risk to the business.

CyberGRX provides various excellent options for mapping standards and controls, what would be nice would be a way to systemically map controls to an organizations pre-established questionnaire(s).

The ability to take the most tedious aspects of third-party risk management and return insights with little to no effort, leaving our internal team free to dive into matters that may pose a risk to the business.

CyberGRX offers us a cost-efficient, state-of-the-art means to manage third-party cyber risk. Specifically, we appreciate an ability to perform efficient procurement with predictive analytics, analyze our portfolio using a common threat or compliance framework, and ensure that the residual risk we report maps to the actual use of the services for a given third party.

Not all customers or vendors leverage the portfolio. This means some percentage of third-party diligence must be conducted using inefficient legacy approaches (outside the CyberGRX portal) that don't lend themselves to structured data analysis or cyber risk intelligence. We wish we could stop the SOC2 review and risk acceptance processes that wrap around our use of the CyberGRX portal.

CyberGRX enables us to accelerate our procurement process as a consumer of technology and services. Further, the platform enables us to simplify/shorten our sales cycle as a vendor of services. Having a measurable third-party cyber risk platform helps us efficiently pass our annual audits, including PCI, HIPAA, HITRUST, SOC1/2, and ISO27001. Without CyberGRX, there is no way we would be able to perform robust benchmarking and diligent third-party risk analysis, given a limited set of resources.

the ability to central these third party assessment in one place with the ability to reuse to gain effiencies

The ability to track customer usage of Cisco CyberGRX assessment to show return on investment. The inability to poll the exchange in the event of a security event.

The one to many problem. The reuse of one assessment dozens of times over. The value the exchange provides drives consistency in industry.

User-friendly interface, Seemless exchange of information w.r.t. risks posed by third parties, Wholistic view of cybersecurity maturity of the third parties

Requirement of specific personnel contact information to proactively share assessment results with client

Managing the risks posed by third parties, utilization of

.I really love the concept of an exchange where vendors all use the same form to provide risk feedback

We need to get the industry to adopt this process overall and stop sending paper forms or spreadsheets

Streamlining the review process and giving us a platform to compare vendors on a consistent basis

Ease of sharing our assessment with our customers.

I don't have any downside to share (other than when my customers require us to complete their assessments due to their requirements)

Operational efficiency and the ability to share our assessment easily and quickly with our customers.

Balancing between ease of use of the tool and meeting business requirements. It comes with a standard template but allows the requestor on the other end to map the report to the desired framework (GDPR, ISO27001, CCPA, HIPAA, etc...), unlike many tools you need to design your own assessment template and report format.

The tool comes with an external security rating score (from a third party) and threat intelligence information that provides an external view and breach history of the company assessed. It also benchmarks the security rating score with the respective industry.

ML based predictive capabilities which were created from more than 9,000 self-assessments from companies spanning various industries and geographies, provide predictive risk profiles.

The exchange feature of the tool, where a company that had responded to a questionnaire for one customer can share the report with another customer rather than having to fill in the questionnaire all over again.

The ability to share our security results with potential clients has been a huge time-saver for the team. The staff was very responsive when we needed assistance with our survey.

The navigation when re-submitting answers for a survey could use some improvement, particularly in cases when answers open up a sub-set of new questions.

CyberGRX is helping provide a single point of information about our company's security procedures that can be shared with multiple clients. This is a big time saving for our team over filling out each company's specific security forms.