Compliance Manager Features
Loaded With Enterprise-Class GRC Features, Yet So Easy To Use!
Compliance Manager GRC includes powerful features designed to deliver the IT security assurance required by any organization. Yet, it’s so easy to use, any non-technical compliance stakeholder can participate in the process.
Stay compliant today, and tomorrow, with our continuous innovation process that keeps pace with the ever-expanding IT security and regulatory environment.
Get a Demo
CIS Critical Security Controls v8
Compliance Manager supports the CIS Critical Security Controls, Version 8 (CIS v8) cybersecurity framework. There are three separate templates for each of the three main Implementation Groups (IG) included in the framework.
Compliance Management Templates
Built-in management templates for common standards and frameworks
Provides regulations and controls to assess common standards including HIPAA, NIST CSF, CMMC, NY DFS, Cyber Liability Insurance, GDPR, Cyber Essentials, Essential 8, with more being added on a regular basis.
Supports Any Standard or IT Requirement
Custom templates (standards) can be created using the build-in common controls, and new controls can also be defined and included in the templates/standards.
Customizable Libraries of Controls, Requirements, and Standards
New feature allows IT professionals – whether they are MSPs or work in IT Departments – to quickly assess their level of compliance with whatever set of IT requirements they specify.
Built-in Standards, Requirements & Controls.
Compliance Manager GRC has dozens of major government and industry standards built into the platform that includes all of the requirements and controls specific to each standard pre-set and ready to use out of the box. You can also create your own standards and customize or create any requirement or controls to match your specific policies and procedures. Watch the video.
Assessment Results presented in Graphical Dashboards
New consolidated dashboard allows users to view the progress of assessments, regardless of the type of assessment being managed.
Tracks Common Controls Across Multiple Standards
Control sets from multiple standards can be tracked and managed together. Saves time and allows multiple controls to be assessed and documented at the same time.
Standard Specific Reports
Each Compliance Management Template includes a complete set of standard-specific reports.
Multiple Assessment Types.
Just getting started and want to perform a Rapid Baseline Assessment to see where you stand? Compliance Manager GRC has the solution. Then, when you are ready to do a full Requirements or Controls Assessment with automated data collection, you’ll be able to build on what you started. Watch the video.
Automated Compliance Process
Automated Data Collection
There are automated data collectors for the LAN, Cloud and individual computers that gather detailed information to be used in the technical assessment.
Policies & Procedures Selection and Generation
Dynamically builds a customized policies and procedures manual for each standard managed.
Automated Report Generation
Automatically generates a dynamic set of evidence of compliance and reports for every standard, regulation and security program you manage.
360-Degree Automated Data Collection.
Compliance Manager GRC has the industry’s most comprehensive set of automated data collection tools to dramatically cut the time it takes to assess and audit compliance with any standard. Collect IT and security data from networks, computers, users, on prem, in the AWS or Microsoft Cloud (including GCC High), on remote machines. You can also collect data on Windows machines using light-weight Discovery Agents included with the platform. Please watch the video for more information.
Self-Serve Brandable Portals
Role Based Task Portal
Any Person with an assessment question to answer, or task to do, can access a personal “My Work” portal to access the task.
Employee Policy Review/Acceptance Portal
Supports the ability to “turn on” a branded Employee/End User Self-Serve Portal to help meet common compliance requirements.
3rd Party Vendor Assessments & Compliance
Includes a “self-service” vendor risk management portal that makes it easy for third parties to complete assessments against any standards you pick
Engage Your Entire Team.
Additional Features
Scanless Rapid Baseline Assessment Questionnaires
Guided questionnaires to quickly determine whether you meet the difference requirements of any control
Employee Policy Review/Acceptance Portal
Supports the ability to “turn on” a branded Employee/End User Self-Serve Portal to help meet common compliance requirements.
Built-in End-User Training, Tracking & Reporting
Ensures and documents that all employees have completed the training as part of the compliance requirements.
Customizable Libraries of Controls, Requirements, and Standards
This allows for the tracking and remediation of compliance issues for multiple standards at the same time, dramatically reducing risk through improved and more efficient compliance management
Tracks Common Controls Across Multiple Standards
Eliminates duplication of effort managing the same control for multiple standards.
Done-For-You Compliance Documentation.
Engage The Right People On The Right Tasks With Role Based Task Assignments
Compliance Manager GRC now includes the ability to help IT professionals manage compliance by assigning specific assessment questions to an individual or group of individuals. This allows the IT staff to handle the technical questions and assign the rest to subject matter experts and other stakeholders. The result is assurance that compliance assessments are more accurate and complete.
Dynamic Policies and Procedures Creation
With this latest release, Compliance Manager GRC dynamically builds you a customized policies and procedures manual for each standard you are managing, and the manual reflects any adjustments that you make to the procedures you follow.
Advantages
- Anytime you take advantage of the custom standard creation feature of Compliance Manager GRC – for example, if you create a standard to manage your own internal IT security program – Compliance Manager GRC will create a customized manual to document it.
- Anytime you make a change to your process in Compliance Manager GRC – like adding a new requirement or changing the procedures you follow – the Policies & Procedures Manuals are automatically updated the next time you generate them.
Management of Custom Controls and Standards
Compliance Manager GRC is a process architecture that accommodates the management of multiple compliance standards. It also provides users that ability to generate custom standards based on common controls.
It allows IT professionals – whether they are MSPs or work in IT Departments – to quickly assess their level of compliance with whatever set of IT requirements they specify.
The software includes a web-based dashboard that allows the IT professional to track and remediate compliance issues for multiple standards at the same time, dramatically reducing risk through improved and more efficient compliance management.
Complete
Covers every standard, including industry frameworks and custom requirement sets.
Automated
Automated data collection, processing and report-generation.
Priced Right
The most affordable enterprise-class GRC platform available.