BWise is an Governance, Risk Management, and Compliance (GRC) platform formerly owned and supported by Nasdaq, acquired by SAI Global in April 2019.
N/A
Osano
Score 8.4 out of 10
Mid-Size Companies (51-1,000 employees)
Osano is a data privacy platform that helps organizations build, manage, and scale their privacy programs. The platform provides a solution for consent, data subject rights, assessments, and vendor risk management, helping organizations stay compliant and increase trust with their customers and partners. With Osano, privacy professionals can manage their complete privacy program in one place, avoiding using multiple tools or complex platforms with time-consuming implementations that keep…
Well suited for general compliance, multiple initiatives, and integration with TeamMate. SAP GRC Process control may be better suited for an SAP environment. Oracle GRC may be better suited for an Oracle environment. Overall, BWise is a very cost effective, and flexible solution.
Osano is great for a full suite of websites to manage. Agencies and companies with many websites to attend to are a good match for Osano's capabilities. Websites that run a lot of cookies and scripts (aka anything WordPress) are good candidates for this service. It is also useful for managing user data, although I do not leverage that feature in my own use.
Great reporting tool (uses SAP Business Objects). It is quite flexible on types of reports that can be created and supported. Also the reporting consultants are very competent and nice.
Highly customizable solution: almost everything can be tailored to an organization's needs, assessments, audits, issues, recommendations, tasks, etc. However, there's a trade-off between customization and the integration of different areas of the organization.
Increases visibility and efficiency in the organization. BWise offers centralized repositories (catalogs) that can be easily accessed and used by everyone in the organization (e.g. Process catalog, Policies and Procedures catalog, Risks, Controls, Laws catalogs, etc.). Also, the application allows findings on controls tested by Audit to be automatically reflected in controls monitored by SOX for example, without the need for SOX to retest them. So one area can leverage on the work of other areas increasing operational efficiency.
Increases integration and avoids silos. By choosing the correct design (e.g. Risk Workshops instead of Open Assessments), one area can see and benefit from another areas' work. An example was mentioned above; another would be Operational Risk area considering the results of Business Continuity, Vendor Management, Info Security, etc. assessments when carrying out theirs. Additionally, processes can be integrated: when contracting a new vendor for instance, one can include questions about data confidentiality and usage of models in the Vendor risk assessment. Answers to these could then trigger Info Sec / Model Risk assessments.
Increases accountability. Application provides full audit/change log with the type of change, name of executor, and date of change.
Easier follow-up. BWise sends automatic emails with reminders to the people required to take action on an issue, assessment, etc.
Wasn't personally involved in the vendor selection process. I am aware that one of the main drivers for selecting BWise was cost (I believe BWise total project cost was several times lower than MetricStream's).
- When adding new scripts to the website, I (me, specifically) need to remember that I'll need to classify them before the scripts will work. [It is] not streamlined for other people on my team.
+ [There are] generally little-to-no issues, which is good.
