Crownpeak Digital Accessibility and Quality vs. ServiceNow Governance, Risk, and Compliance

If you have a fully customized cms and have people working on the site with html and css knowledge this is the best tool ever, all specifics can be checked. Using ab tests and optimization services we identify best practices of the website and everywhere the best practices aren't implemented we find using the custom checkpoints. Aspects that cannot be automated via a quick IT solution is turned into a checkpoint and that's great!

Incentivized

Oracle EBS R12 requires a unique user skillset to understand how it handles user access and functions. Accordingly, ServiceNow has this high level of sophistication to manage this information and apply it to Sensitive Access and Segregation of Duties rules to identify exceptions. This depth of configuration is critical to accurately identify when Oracle Responsibilities (access) truly allows access and thus could be a violation. ERPs with less complexity may not require this customization of ServiceNow GRC, but you would be wise to raise these questions and examples in the demo to ensure it will work for you. In the past, we have found that risks of under-reporting exceptions or false positives become so voluminous that users don't always get to the accurate violations for timely remediation. Proper configuration up front will improve your effectiveness and ROI down the road.

Incentivized

• Preconfigured checkpoints to gather a baseline.
• Reporting at regular intervals to identify pain points.
• Mapping to WCAGG standard to understand how to resolve errors.
• Ability to add customized checkpoints to align with messaging changes
• Aggregating images in a visual repository to scan for relevancy.

Incentivized

• Finding reported by the auditor. GRC helps us identify, assign, and track the resolution of this.
• Exception to information security policy. These require quarterly reviews and setting up reminders to revisit these.
• Building out new projects and baking security and compliance into the project and tracking it in GRC to ensure we deliver a compliant product on day one

Incentivized

• It would be helpful if the Issues page under Website showed the WCAG level for each issue (A, AA, AAA). You currently have to look up the guideline to find the level.
• There is no indicator that a page is currently being scanned. During a website scan, some of the reports are blank or missing information. Having a notification on the main page showing which websites are being scanned would be helpful.
• Some ADA compliance items are left off, such as keyboard navigation, tabbing, etc.
• It doesn't view the websites on mobile devices or if using a screen reader. Some pages or formatting changes depending on resolution. The DQM, from what I have seen, doesn't account for that.

Incentivized

• Delivering more out of the box functionality that rivals other GRC platforms. The bare bones approach may not help companies that do not have expertise or capabilities to build effective GRC processes.
• Easier way to implement workflow.
• Offering better metrics without buying add-on tools.

Incentivized

We've seen competitors, they're not doing as well of a job as dqm is. It's a wonderful tool and there a huge opportunities for crownpeak

Incentivized

I had a small learning curve in order to become fluent with the platform as it doesn't work like the other automated accessibility tools that I've used. However, once I was up to speed, I like it better than any of the other tools and find the data more useful, digestible, and relevant.

Incentivized

I'm satisfied with our experience. The configuration was the biggest challenge, but we have moved onto the stage of user training and usability. We would appreciate having better user training documentation and possibly videos and/or computer-based training to help our international users adopt this software for their GRC needs.

Incentivized

Haven't had issues accessing the dashboard when needed.

No issues with speed and performance

DQM support teams are responsive and knowledgeable, and will spend time working directly with client and agency teams to ensure the best outcomes are achieved. I can't fault the level of input and engagement from Crownpeak support teams across the board.

It's a good system, but I am awaiting key features in the new release. We hear that ServiceNow is continually adding new features and we look for improved reporting, better Oracle Integration, and user training opportunities. To the extent these materialize, we expect further improvements in our experience with ServiceNow GRC. Until that time, though, we believe we are meeting our objectives expected at the beginning of this project.

Incentivized

Product is straight-forward but the training was helpful and beneficial

The initial process is not clear but after the first cookie banner all others are faster to implement.

Incentivized

One of the most similar solutions to Crownpeak is the Yext tool because it has a good set of functions that can be managed from content to customer experiences, it is fascinating to be able to track all user interactions through users, in the same way as in Crownpeak that allows all users to create digital experiences.

We just recently started using TrustArc for data privacy requests and I can already speak to the fact that TrustArc is a more confusing platform once there. The positives of ServiceNow would be that a majority of our URL's drive to owned websites which our employees are very comfortable with using versus pushing them to another website that feels unsafe.

Incentivized

haven't had issues accessing when needed.

• When driving Customer Care, it was great to be able to add the Autofix tool to the web estate - a quick-win that really drives the accessibility agenda.
• Building reports off the back of DQM gives senior stakeholders an understanding of the importance of usability and accessibility.
• The gamification of league tables highlights to stakeholders the areas that need focus and budget in order to improve.

Incentivized

• Effective Enterprise Risk Management
• Holistic Real-time Monitoring of your technology and Risk
• Negative - Asset Management has some issues and Ghost / Shadow IT is big issue