HSI Donesafe vs. ServiceNow Governance, Risk, and Compliance

Donesafe is suited to any business due to its customisability and flexibility. There are no situations we have found as yet where it is not suited.

Incentivized

Oracle EBS R12 requires a unique user skillset to understand how it handles user access and functions. Accordingly, ServiceNow has this high level of sophistication to manage this information and apply it to Sensitive Access and Segregation of Duties rules to identify exceptions. This depth of configuration is critical to accurately identify when Oracle Responsibilities (access) truly allows access and thus could be a violation. ERPs with less complexity may not require this customization of ServiceNow GRC, but you would be wise to raise these questions and examples in the demo to ensure it will work for you. In the past, we have found that risks of under-reporting exceptions or false positives become so voluminous that users don't always get to the accurate violations for timely remediation. Proper configuration up front will improve your effectiveness and ROI down the road.

Incentivized

• Easy to use: The solution is easy for our people which encourages use.
• Easy to design: We are able to configure our version to align with existing processes. We can do it our way which creates greater ownership of the process.
• Transparency: Once the information is in the system, it is easy to create insights and learn where our opportunities lay.
• Compliant: It creates a central repository of evidence to demonstrate compliance whenever required.

Incentivized

• Finding reported by the auditor. GRC helps us identify, assign, and track the resolution of this.
• Exception to information security policy. These require quarterly reviews and setting up reminders to revisit these.
• Building out new projects and baking security and compliance into the project and tracking it in GRC to ensure we deliver a compliant product on day one

Incentivized

• Timely response from the contractor's support team.
• Provision of more in depth training to the Admins.
• Provision of more in depth training for the Admins to troubleshoot from the back end.
• Constant follow up and checks done by the contractor after the launch would've been helpful.

Incentivized

• Delivering more out of the box functionality that rivals other GRC platforms. The bare bones approach may not help companies that do not have expertise or capabilities to build effective GRC processes.
• Easier way to implement workflow.
• Offering better metrics without buying add-on tools.

Incentivized

Donesafe has made it easier to roll out the system company-wide in a relatively short period of time. The mobile apps which work offline are the best part about getting the workforce onboarded and start using the tools for reporting incidents and doing inspections with easy checklists. The flexible system makes sure there are no unused parts of the software which just adds to the complexity.

Incentivized

I'm satisfied with our experience. The configuration was the biggest challenge, but we have moved onto the stage of user training and usability. We would appreciate having better user training documentation and possibly videos and/or computer-based training to help our international users adopt this software for their GRC needs.

Incentivized

It's a good system, but I am awaiting key features in the new release. We hear that ServiceNow is continually adding new features and we look for improved reporting, better Oracle Integration, and user training opportunities. To the extent these materialize, we expect further improvements in our experience with ServiceNow GRC. Until that time, though, we believe we are meeting our objectives expected at the beginning of this project.

Incentivized

Knocked it out of the park, in functionality and usability, particularly in the configuration at the back end. Looks good and customisable to meet branding and look and feel of the business.

Incentivized

We just recently started using TrustArc for data privacy requests and I can already speak to the fact that TrustArc is a more confusing platform once there. The positives of ServiceNow would be that a majority of our URL's drive to owned websites which our employees are very comfortable with using versus pushing them to another website that feels unsafe.

Incentivized

• Donesafe has myself and my organization a lot of time through no longer having manual tasks around safety.
• It has mitigated infectious disease risks, through the effective and simple to use module

Incentivized

• Effective Enterprise Risk Management
• Holistic Real-time Monitoring of your technology and Risk
• Negative - Asset Management has some issues and Ghost / Shadow IT is big issue