Software that sophisticatedly handles annual assessment data
I am currently running a platform that is a self-proclaimed Governance, Risk and Compliance tool. We send out assessments to our companies (about 50 of them) every year. Also each year, we make updates to these assessments. To make matters more complicated,…
I am currently running a platform that is a self-proclaimed Governance, Risk and Compliance tool. We send out assessments to our companies (about 50 of them) every year. Also each year, we make updates to these assessments. To make matters more complicated, SOME companies provide support to meet a portion of the assessment for other companies (think of them as "partners"). The challenge Im facing aside from horrible reporting (we just export it out) is that year over year, things get very tricky with the retention of previous years scoring. Often things are updated and over time, will help us track trends based on assessment responses. Are there any platforms that can act as a hub for assessments and the responses collected? Ideally one that has a lot of granularity and data handling capabilities.
已收录讨论
Wait... you said you are already running a platform. So why not talk with your devs to improve your own product instead of trying change a 1st party solution to a 3rd party solution. Unless I am not understanding your request fully. By chance are you just looking to replace your current 3rd party platform with a different 3rd party platform? Specifically a MSP version of a GRC tool? GRC tools can vary a lot in cost based on the features you need and they do act as a hub where you an the client can manage assessments and documentation. Its going to be a matter of finding one you like for the features and cost. Like SecureFrame can do a lot and could run you 45k a year depending on chosen options or you could go something more lightweight vendor and get something for 5k/year+usage fees. So what kind of budget are you working with and what features are you looking for? Did you rank your desired features from Required, Nice-to-have, and optional yet? That list can also help steer you one direction or another.
Well thats part of the issue...we've been working on some development to fix a lot of issues we encountered. Was proposed to be 8 weeks, and we are over a month over the timeline. The support has been shifted to overseas and generally speaking they aren't great. We pay 47k a year. That includes third party risk management and IT compliance modules. This is our third year with the current vendor and we have made a lot of progress with things my organization requires but every year it gets so messy due to just some general shortcomings with the application. An example: their data import process is archaic and SO complicated. It is very prone to human error being that they require imports be done with a spreadsheet. When you have 20k lines of unique data and objects, it becomes a very sketchy situation as far as integrity is concerned.
if you are dealing with data request, why don't you add feature in your platform to allow all companies to upload data directly into your platform. maintaining data integrity only issue is that you need to explain each field in details what it means otherwise companies tent to misunderstood and enter incorrect data. We have seen these kinds of issues all the time.