Comprehensive software reviews to make better IT decisions
I recently had the opportunity to speak with Jason Rohlf, VP Solutions, Mark Scheinkoenig, VP Commercial Sales, and Emily Figg, VP Marketing about their GRC solution at Onspring to discuss the product audience and upcoming features.
Onspring was founded in 2010 with headquarters in Kansas, USA. Its GRC solution is available in a cloud-only offering with a user-based licensing model. The platform supports a rich number of control frameworks and can use the Universal Compliance Framework (UCF) to minimize the response requirements for common controls.
The product is on a regular refresh cycle, which generally happens quarterly with several upcoming features and enhancements scheduled for release in the next quarter. These include a refresh of the user interface, which aims to provide a cleaner, more modern look that takes advantage of the visual real estate, and an update to the workflow feature set, including the introduction of dynamic workflows with multi-path capability.Upcoming releases will include new options for filtering and reporting on data.
This robust platform has been widely adopted across market sectors.
Source: Interview June 2020
Partnering with an organization that understands the needs of its client base and invests in adapting to change and demand is key. When choosing a vendor, consider the roadmap or the product, whether the features they are planning to introduce are in line with your needs, and review the frequency with which changes are being made. A vendor who is vested in keeping the product current based on feedback from their user community is key to ensuring maximum return on investment over time.
Source: GRC at SoftwareReviews, Accessed July 1, 2020
By exploiting a five-year-old configuration error, a hacker was able to access Amazon’s S3 cloud storage buckets on which Twilio’s code was loaded. As a result, customers were able to unknowingly download the modified code for twenty-four hours.
Qualys VMDR and Ivanti have announced a new partnership dedicated to improving the detection and patching of vulnerabilities. Announced July 30, the Qualys and Ivanti Partnership have already gone live as an integrated component of the VMDR solution.
IBM is changing the terms of its ubiquitous Passport Advantage agreement to remove entitled discounts on over 5,000 on-premises software products, resulting in an immediate price increase for IBM Software & Support (S&S) across its vast customer landscape.
RiskSense announced on July 13 its new version of the cloud-delivered RiskSense risk management platform. The main draw of the program is its holistic risk calculation across CVEs and CWEs.
Cyberthreats are omnipresent for any enterprise. Monitoring ingress and egress points while still conducting business is a balance security professionals attempt to strike. Couple this with the continued security issues around remote work during the pandemic, and security teams have their hands full.
Navigating the vendor risk management space, particularly in the current environment that consists of a mix of cloud, managed services, and critical supply chain, is key to ensuring that you don’t inadvertently introduce new risks through this dynamic channel.
On May 26, Kenna Security released its new Prioritization to Prediction Benchmark Survey. This free tool provides organizations with the ability to compare their vulnerability management programs to industry averages Kenna Security has compiled over the years.
COVID-19 has changed a great deal about how businesses operate. From a security perspective, however, COVID-19 caught many businesses off guard. The shift from working in the office to working from home has made it difficult for security measures to keep pace. Specifically, how are businesses meant to maintain the same secure networks when their employees are no longer working in the office? Outside of the security of the IT departments, IT and security have a tough time ensuring that patching and vulnerability management remain at the forefront of a business’s priorities.
From employee management through leadership and communication, increased cyber threats, logistics and operations to post-pandemic planning and risk mitigation, the threat landscape has experienced enormous change. These noticeable shifts force us to consider rethinking and retooling how we address risk.