Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

OneTrust's Third-Party Management solution revolutionizes the management of your third-party lifecycle through data-driven automation, moving away from a questionnaire-first methodology to a risk-oriented framework by integrating data that enhances the security and efficiency of your third-party ecosystem. This innovative approach automates previously manual processes and customizes assessments to meet the specific requirements of each third-party relationship, thereby significantly boosting the efficiency of evaluations. Users typically see an impressive average reduction of over 70% in both time and costs related to conducting third-party risk assessments, which helps streamline the onboarding process. The platform utilizes top-tier data sources to perpetually monitor the risk profiles of third parties and automatically addresses emerging risks as they arise. By synchronizing workstreams and uniting teams around shared workflows, data objects, inventories, and objectives, it fosters greater consistency and efficiency. Furthermore, the solution enhances internal capabilities by automating essential processes and facilitating centralized oversight of third-party inventories, ensuring a more robust and responsive risk management framework. Ultimately, this level of integration not only strengthens risk management but also supports strategic decision-making across the organization.

Description

The GRC software you've been looking for: Onspring. A flexible, no-code, cloud-based platform, ranked #1 in GRC delivery for 5 years running. Easily manage and share information for risk-based decision-making, monitor risk evaluations and remediation results in real-time, and create reports with with KPIs and single-clicks into details. Whether leaving an existing platform or implementing GRC software for the first time, Onspring has the technology, transparency, and service-minded approach you need to achieve your goals rapidly. Our ready-made product products are designed to get you going as fast as 30 days. SOC, SOX, NIST, ISO, CMMC, NERC, HIPAA, PCI, GDPR, CCPA - name any regulation, framework, or standard, and you can capture, test, and report on controls and then activate remediation of risk findings. Onspring customers love the no-code platform because they can make changes on the fly and build new workflows or reports in minutes, all on their own without the need for IT or developers. When you need nimble, flexible, and fast, Onspring is the best software option on the market.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Black Kite Yes 
RiskRecon Yes 
SecurityScorecard Yes 
AdaptiveGRC Yes 
BitSight Yes 
Common Controls Hub No 
D&B Connect Yes 
Databricks Yes 
Docusign Yes 
Dow Jones Risk & Compliance Yes 
Google Drive Yes 
Jira Yes 
Ketch Yes 
Malbek Yes 
Microsoft Exchange Yes 
OneTrust Data Use Governance Yes 
Regology No 
SAP Cloud Platform Yes 
Salesforce Yes 
UpGuard Yes 

Integrations

Black Kite Yes 
RiskRecon Yes 
SecurityScorecard Yes 
AdaptiveGRC No 
BitSight No 
Common Controls Hub Yes 
D&B Connect No 
Databricks No 
Docusign No 
Dow Jones Risk & Compliance No 
Google Drive No 
Jira No 
Ketch No 
Malbek No 
Microsoft Exchange No 
OneTrust Data Use Governance No 
Regology Yes 
SAP Cloud Platform No 
Salesforce No 
UpGuard No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

$20,000/year
Choose your licensing model (by user, by product or a hybrid approach), and choose your platform level (essential features and upgrades) to fit both your needs and your budget.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

OneTrust

Founded

2016

Country

United States

Website

www.onetrust.com/solutions/third-party-management/

Vendor Details

Company Name

Onspring GRC Software

Founded

2010

Country

United States

Website

www.onspring.com

Product Features

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management Yes 
Issue Management Yes 
Mobile Access Yes 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Business Continuity

Backup Log No 
Backup Scheduling No 
Compression No 
Continuous Backup No 
Encryption No 
Incremental Backup No 
Local Server Options No 
Multiple System Support No 
Remote Server Options No 
Secure Data Storage No 
Web Access / Restoration No 

Compliance

Archiving & Retention Yes 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing Yes 
Environmental Compliance Yes 
FDA Compliance Yes 
HIPAA Compliance Yes 
ISO Compliance Yes 
Incident Management Yes 
OSHA Compliance Yes 
Risk Management Yes 
Sarbanes-Oxley Compliance Yes 
Surveys & Feedback Yes 
Version Control Yes 
Workflow / Process Automation Yes 

Disaster Recovery

Administration Policies Yes 
Bare-Metal Recovery No 
Encryption No 
Failover Testing No 
Flexible Data Capture No 
Multi-Platform Support No 
Multiple Data Type Support No 
Offline Storage No 

ESG

Activity Dashboard Yes 
Analytics/Reporting Yes 
Audit Management Yes 
Benchmarking Yes 
Compliance Management Yes 
Data Visualization Yes 
Document Management Yes 
Performance Metrics Yes 
Risk Assessment Yes 

GRC

Auditing Yes 
Disaster Recovery Yes 
Environmental Compliance Yes 
IT Risk Management Yes 
Incident Management Yes 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

Incident Management

Audit Trail Yes 
Corrective Actions (CAPA) Yes 
Disaster Recovery Yes 
IT Incident Management Yes 
Incident Reporting Yes 
OSHA Compliance Yes 
Root-Cause Diagnosis Yes 
Safety Management Yes 
Task Management Yes 
Ticket Management Yes 

Incident Response

Attack Behavior Analytics No 
Automated Remediation Yes 
Compliance Reporting Yes 
Forensic Data Retention No 
Incident Alerting Yes 
Incident Database Yes 
Incident Logs Yes 
Incident Reporting Yes 
Privacy Breach Reporting Yes 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management Yes 
Security Orchestration No 
Threat Intelligence No 
Timeline Analysis No 
Workflow Automation Yes 
Workflow Management Yes 

Integrated Risk Management

Audit Management Yes 
Compliance Management Yes 
Dashboard Yes 
Disaster Recovery Yes 
IT Risk Management Yes 
Incident Management Yes 
Operational Risk Management Yes 
Risk Assessment Yes 
Safety Management Yes 
Vendor Management Yes 

Policy Management

Approval Process Control Yes 
Attestation Yes 
Audit Trails Yes 
Policy Creation Yes 
Policy Library Yes 
Policy Metadata Management Yes 
Policy Training Yes 
Reporting / Analytics Yes 
Version Control Yes 
Workflow Management Yes 

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management Yes 
Mobile Access Yes 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management Yes 
Response Management Yes 
Risk Assessment Yes 

Vendor Management

Audit Management Yes 
Contact Management Yes 
Customer Database Yes 
Self Service Portal Yes 
Supplier Master Data Yes 
Transaction History Yes 
Vendor Maintained Profiles Yes 
Vendor Managed Inventory Yes 
Vendor Performance Rating Yes 
Vendor Qualification Tracking Yes 

Alternatives

Alternatives

integrum Reviews

integrum

integrum Management Systems
Triplicity Reviews

Triplicity

Phinity Risk Solutions
1Exiger Reviews

1Exiger

Exiger
ClearGRC Reviews

ClearGRC

Clear Infosec