ManageEngine DataSecurity Plus vs. OneTrust GRC & Security Assurance Cloud

Manage Engine Data Security Plus is very capable of tracking modifications to specified files within fileservers. This specific part is easy to set up and control. It also is able to easily identify "junk" files which can then be addressed with the end-user. Setup for risk analysis can use some improvement.

Incentivized

OneTrust provides a repeatable and defined process for vendor assessments but should be adapted to your organization. OneTrust functions well for a centralized document repository. The pricing of modules and what modules are required for workflows to function fully should be better defined. Automated assessments can wind up in spam filters and should be communicated outside of the platform prior to sending to the vendor.

Incentivized

• Track file creations and modifications.
• Track disk space for filesystems monitored.
• Identify junk files.

Incentivized

• Module wise implementation.
• Very reasonable price structure.
• Easy and speedy to implement.
• Product roadmap.

• Track file content for binary files such as Excel.
• Services occasionally stops running.
• Setting report specifications for risk analysis.

Incentivized

• Documentation chasing for assessments is not as automated or hands-off as demos made it seem.
• Getting custom risk matrix set up required professional onboarding.
• Platform is less than intuitive.
• Pricing is module dependent and demos do not highlight which module is included in which workflow.

Incentivized

During the assessment, we found that OneTrust is easier to use, set up, and administer. it has a quick ROI and value for business. The OneTrust product support and roadmap are far more competitive in comparison to TrustArc. OneTrust is specialized in GRC including Data Privacy and Cookie compliance, where Archer is good in Enterprise Risk management.

• Allows us to identify any PII within files for PCI Compliance.
• Tracked file changes for security.
• Improved overall PCI compliance.

Incentivized

• More uniform vendor assessments.
• Defensible numeric metrics reflecting risk.
• Centralized document repository for audit proofs.

Incentivized