KnowBe4 KCM GRC Platform (discontinued) vs. SecurID

KnowBe4 KCM GRC Platform is well suited for a company that knows what they're doing compliance wise and needs to save time doing it. It won't be something you can spend a few hours on and then put on autopilot. It was made to create a rhythm within your own team, and you'll need to have the buy-in. It's useful for IT and Legal teams that already have a vendor risk management process, but want to have a better handle on it. Giving an outside auditor read-only access to a scope is also a huge time saver.

Incentivized

Easy to implement and support. Flexible platforms and user-friendly interface. Not a lot of customization is available to customers and response time of support could be better. There are now competing products that utilize new features like facial recognition. Using camera and fingerprint sensors are becoming standard in smartphones so RSA SecureID should offer those as options.

Incentivized

• Mapping controls across different compliance frameworks. It saves you a ton of time and energy!
• Performing risk assessments at the granularity that you prefer, splitting assessments across departments and teams if you wish.

Incentivized

• RSA Authentication Manager is easy to deploy and configure.
• It is a scalable solution meant for a large enterprise.
• Some of the key features of RSA Authentication Manager where it particularly does well are provisioning, mapping, and logging.
• It has a very nice console with good administrative and troubleshooting options.
• Reliable security for VPN, applications, and wifi.

Incentivized

• Vendor management has a few kinks to work out. We want to be able to do internal questionnaires for vendors as a compliance checklist before we sign off on a contract. Nothing in the works yet, but there are a few workarounds.
• The navigation between different tasks in scope is clunky, and it's easy to lose your place, and it forces you back to the main page of the scope to retrace your steps.

Incentivized

• Slow to provide updates to latest operating system versions.
• While the GUI is clean and easy to use, it does look very dated.
• There is not an option for a temporary code to log in. It would be nice for situations where you are at a remote site but don't have your device (laptop, phone, etc.) with you, as well as other situations.

Incentivized

Long story short, does the job. Can use company credentials to setup and access the account for SecurID. Easy to setup and implement. Doesn't have a high learning curve.

Incentivized

Using it very frequently, it's important that its straight forward and I do not have to go through unnecessary hoops to achieve something seemingly simple. Can setup using the company credentials and do not have to setup up a separate account. Setup was fast and easy. GUI is very straight forward and quick.

Incentivized

Support from KnowBe4 KCM GRC Platform is always great. It's always in-house localized support, with excellent response times, and dedicated Customer Success Managers to answer the bulk of your questions or take your suggestions and make them a feature request. They will also reach out at least quarterly and do health checks to make sure you're using the platform to the best of your ability.

Incentivized

Their support for onboarding and set-up is quite good. The only issues we tend to have are obtaining new user devices. These need to be planned ahead of time.

Incentivized

Quantivate and Fusion were the other two options we checked out. The quantity was high, and a good bit more expensive, but it was the best performing with its platform. They also had more modules that each cost extra to add to your subscription. KnowBe4 KCM GRC Platform was all-in-one and a little less mature, but the better buy. Fusion was hard to follow in the demo, and I was not overly impressed. I may have made my decision early enough in the demo to not pay much more attention to it.

Incentivized

Overall MS AAD is good but we have had a few too many reliability issues with the product that have lead to enterprise authentication outages over the last year. The Senior executives have a preference on Securid to be more reliable than MS AAD. SecurID does a better job in Integration for legacy on-premise applications for instance.

Incentivized

• Just having the capacity to do things the right way, and formally, has driven some of our compliance efforts.
• Due to licensing limitations, we likely overspent on seats to the platform that we didn't need but also didn't want to miss out on.

Incentivized

• Implementing RSA SecurID has allowed us to help our clients understand we are committed to compliance.
• Implementing RSA SedcurID has, however, negatively impacted employee productivity. Employees need to be aware of the additional steps they need to take to authenticate to a protected system.
• RSA SecurID has helped us with our compliance audits.

Incentivized