Allgress

Allgress GRC is a risk management solution offered by Allgress, Inc. According to the vendor, it aims to streamline governance, risk, and compliance processes for organizations of all sizes. The product caters to risk managers, compliance officers, IT security professionals, audit professionals, and the financial services industry. It provides centralized management of compliance assessments, incident management, policy and procedures, risk exceptions, and vendor management.

Key Features

Compliance Assessment: According to the vendor, Allgress' Compliance Module automates the aggregation and interpretation of information across various regulations, standards, and frameworks. It supports unlimited proprietary or industry regulations such as FedRAMP, CMMC, PCI, HIPAA, SOC 2, FFIEC, GLBA, ISO, and NIST. The module offers a visually intuitive representation of cross-compliance mapping.

Incident Management: Allgress enables security and risk professionals to manage security incidents and investigations through its centralized repository. According to the vendor, it unifies, prioritizes, and provides easy access to incident information. It offers incident triage, coordination, resolution, and investigation capabilities, along with federated chat functionality for collaboration.

Policy & Procedures: Allgress' Policy Management functionality allows for centralized management of internal security and regulatory policies and procedures. According to the vendor, it supports the full lifecycle management of policies, including definition, drafting, publishing, exception management, attestation, and tracking. It facilitates control mapping and linking of policies or procedures to audits, surveys, exceptions, risks, and other assessments. Templates based on industry regulations or security frameworks are provided for ease of use.

Risk Exception: Allgress' Exception Management Program automates the identification, evaluation, and approval of risk exceptions. According to the vendor, it provides a single-source-of-truth repository for cataloging exception requests and associated findings. The program streamlines approval processes based on risk level and allows for sequenced approvers for different exception types. It also automates the calculation of overall risk level and impact for each exception request, enabling real-time execution of remediation plans.

Centralized Data: Allgress offers a centralized platform for streamlining business processes and leveraging data across all modules. According to the vendor, it allows for the utilization of the same data across multiple modules and compliance standards. Integration with 50 third-party intelligence, data analytics, and content feeds through API connectors further enhances data capabilities. The platform's user-friendly interface and rapid implementation enable quick time to value, while executive and management dashboards provide real-time, empirical data for decision-making.