Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 4 Ratings

Total
ease
features
design
support

Description

EasyRisk.io is operational risk management software for organizations that have outgrown a spreadsheet risk register but do not want a heavyweight GRC suite. Every risk runs through the ISO 31000 loop - identify, analyze, evaluate, treat, monitor. Inherent and residual ratings are set on a guided 5x5 likelihood-by-impact matrix; each risk carries a named owner, treatment actions with due dates, and its own review interval, and the register reports what is due, overdue or closed. Every change is written to an audit trail that cannot be edited: who changed which field, from which value to which, and when. The trail of a risk exports as CSV, so an audit gets its evidence as a file rather than as a tour through screenshots. Access is granted per board, not per workspace, so an auditor can be given one register and nothing else. Comments, attachments and review reminders sit on the risk itself. Pricing is per editor. Auditors, management and reviewers read without occupying a seat, and every plan carries unlimited risks. Free forever for one editor. Swiss company, servers in the EU.

Description

GRC solution for technology-focused SMBs and Enterprise Information Security Teams. StandardFusion eliminates the need for spreadsheets by using one system of record. You can identify, assess, treat and track risks with confidence. Audit-based activities can be made a standard process. Audits can be conducted with confidence and easy access to evidence. Manage compliance to multiple standards: ISO, SOC and NIST, HIPAA. GDPR, PCI–DSS, FedRAMP, HIPAA. All vendor and third party risk and security questionnaires can be managed in one place. StandardFusion, a Cloud-Based SaaS platform or on-premise GRC platform, is designed to make InfoSec compliance easy, accessible and scalable. Connect what you do with what your company needs.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Common Controls Hub No 
Confluence No 
Jira No 
Jira Work Management No 
Okta No 
Slack No 

Integrations

Common Controls Hub Yes 
Confluence Yes 
Jira Yes 
Jira Work Management Yes 
Okta Yes 
Slack Yes 

Pricing Details

€14/mo/editor billed yearly
Free: 1 editor, 1 risk board, 5 viewers - free forever, no card required.
Team: EUR 14 per editor/month billed yearly (EUR 19 monthly) - 5 boards, unlimited editors, comments, priority support.
Business: EUR 29 per editor/month billed yearly (EUR 39 monthly) - 10 boards, custom categories, scales and severity bands.
Enterprise: on request.

Viewers - auditors, management, reviewers - never use a seat, and every plan carries an unlimited number of risks.
Free Trial No 
Free Version Yes 

Pricing Details

$1800 per month
Multiple licensing tiers available; Cloud and On-Premise
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Swiss Security Hub AG

Founded

2020

Country

Switzerland

Website

easyrisk.io

Vendor Details

Company Name

StandardFusion

Founded

2016

Country

Canada

Website

www.standardfusion.com

Product Features

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control No 
Compliance Management No 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management No 
IT Risk Management Yes 
Internal Controls Management No 
Legal Risk Management No 
Mobile Access Yes 
Operational Risk Management Yes 
Predictive Analytics No 
Reputation Risk Management No 
Response Management No 
Risk Assessment Yes 

Product Features

Audit

Alerts / Notifications No 
Audit Planning No 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management No 
Issue Management Yes 
Mobile Access No 
Multi-Year Planning No 
Risk Assessment Yes 
Workflow Management Yes 

Compliance

Archiving & Retention Yes 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking No 
Controls Testing Yes 
Environmental Compliance No 
FDA Compliance Yes 
HIPAA Compliance Yes 
ISO Compliance Yes 
Incident Management Yes 
OSHA Compliance No 
Risk Management Yes 
Sarbanes-Oxley Compliance Yes 
Surveys & Feedback No 
Version Control Yes 
Workflow / Process Automation Yes 

Data Governance

Access Control Yes 
Data Discovery No 
Data Mapping No 
Data Profiling No 
Deletion Management No 
Email Management No 
Policy Management Yes 
Process Management Yes 
Roles Management Yes 
Storage Management No 

Data Privacy Management

Access Control No 
CCPA Compliance No 
Consent Management No 
Data Mapping No 
GDPR Compliance No 
Incident Management No 
PIA / DPIA No 
Policy Management No 
Risk Management No 
Sensitive Data Identification No 

GDPR Compliance

Access Control Yes 
Consent Management No 
Data Mapping No 
Incident Management Yes 
PIA / DPIA Yes 
Policy Management Yes 
Risk Management Yes 
Sensitive Data Identification No 

GRC

Auditing Yes 
Disaster Recovery No 
Environmental Compliance No 
IT Risk Management Yes 
Incident Management Yes 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

HIPAA Compliance

Access Control / Permissions Yes 
Audit Management Yes 
Compliance Reporting Yes 
Data Security Yes 
Documentation Management No 
For Healthcare No 
Incident Management Yes 
Policy Training Yes 
Remediation Management No 
Risk Management Yes 
Vendor Management Yes 

Integrated Risk Management

Audit Management Yes 
Compliance Management Yes 
Dashboard Yes 
Disaster Recovery No 
IT Risk Management Yes 
Incident Management Yes 
Operational Risk Management Yes 
Risk Assessment Yes 
Safety Management No 
Vendor Management Yes 

PCI Compliance

Access Control Yes 
Compliance Reporting Yes 
Exceptions Management Yes 
File Integrity Monitoring No 
Intrusion Detection System No 
Log Management No 
PCI Assessment No 
Patch Management No 
Policy Management Yes 

Policy Management

Approval Process Control No 
Attestation No 
Audit Trails No 
Policy Creation Yes 
Policy Library Yes 
Policy Metadata Management No 
Policy Training No 
Reporting / Analytics Yes 
Version Control Yes 
Workflow Management Yes 

Risk Management

Alerts/Notifications No 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management No 
Predictive Analytics No 
Reputation Risk Management No 
Response Management Yes 
Risk Assessment Yes 

Vendor Management

Audit Management Yes 
Contact Management Yes 
Customer Database No 
Self Service Portal No 
Supplier Master Data No 
Transaction History No 
Vendor Maintained Profiles No 
Vendor Managed Inventory No 
Vendor Performance Rating No 
Vendor Qualification Tracking No 

Alternatives

Alternatives

EasyRisk.io Reviews

EasyRisk.io

Swiss Security Hub AG
UXRisk Reviews

UXRisk

Proactima
BCMsoft Reviews

BCMsoft

KMIR Consultants
SimpRisk Reviews

SimpRisk

PVA Digital Systems