Diligent One Platform vs. OneTrust GRC & Security Assurance Cloud

Product is a great tool to serve as a central point to compile and document sox controls. This allows transparency across the team and teammates to edit and view progress. The tool also provides an interface that will make it easy for the internal audit team to track and compile control requests. I particularly like how it lets all of the control owners take ownership of their controls. I am currently exploring some of the advanced tools that support testing and the accuracy and completeness of our data, which i'm very excited to explore.

Incentivized

OneTrust provides a repeatable and defined process for vendor assessments but should be adapted to your organization. OneTrust functions well for a centralized document repository. The pricing of modules and what modules are required for workflows to function fully should be better defined. Automated assessments can wind up in spam filters and should be communicated outside of the platform prior to sending to the vendor.

Incentivized

• HighBond is great for managing requests, to do’s, and review notes
• HighBond is generally flexible with the configuration and terminology you can use.
• HighBond is a good tool for centralizing risks, controls, test plans, and procedures in a framework that allows you to standardize its usage.

Incentivized

• Module wise implementation.
• Very reasonable price structure.
• Easy and speedy to implement.
• Product roadmap.

• The current setup does not have a risk management option.
• There is not an easy way to catalog all audits and then cycle through them.
• The set up of tabs within a project can be a bit cumbersome and excessive.

Incentivized

• Documentation chasing for assessments is not as automated or hands-off as demos made it seem.
• Getting custom risk matrix set up required professional onboarding.
• Platform is less than intuitive.
• Pricing is module dependent and demos do not highlight which module is included in which workflow.

Incentivized

HighBond by Galvanize support has some of the best and fastest support that I have experienced. Though we only contact them through emails, they were quick to provide insightful information about our problems. Whenever we email them about an issue, they would be able to reply in less than an hour, ready and prepared with useful solutions to address the issue.

Incentivized

I was not involved in the implementation, but i do think the interface works well and is a great tool to centralize our compliance program. I'm currently in the process of exploring many of the advanced features and using the Diligent Academy to learn about some of these exciting features to add value to our organization. I recently attended a CPE and was very impressed with the presenters and their energy and knowledge of the product

Incentivized

Diligent Highbond stacks up somewhat poorly against our other tools. In addition to what was included above, we use some smaller tools that fulfill many of the gaps left by Diligent Highbond. We have since started to move away from Diligent Highbond. Alteryx is better at processing data and their server tool can be used to publish results for review.

Incentivized

During the assessment, we found that OneTrust is easier to use, set up, and administer. it has a quick ROI and value for business. The OneTrust product support and roadmap are far more competitive in comparison to TrustArc. OneTrust is specialized in GRC including Data Privacy and Cookie compliance, where Archer is good in Enterprise Risk management.

• It has saved me time generating status reports
• It has saved me time in coordinating with others to obtain information, since it tracks requests and sends reminders
• It saves time with to dos and open reviews to keep track of tasks to be completed

Incentivized

• More uniform vendor assessments.
• Defensible numeric metrics reflecting risk.
• Centralized document repository for audit proofs.

Incentivized