Optro (formerly AuditBoard) is a connected risk platform designed to elevate teams, engage the front lines of a business, and help users leverage risk as a strategic driver. At the heart of the connected risk architecture is a unified data core that centralizes the organization's risks, controls, policies, frameworks, and issues. The core is surrounded by a set of platform capabilities, including collaboration, automation, a workflow engine, business intelligence, and an extensible integration…
N/A
Secureframe
Score9.2 out of 10
N/A
Secureframe, headquartered in San Francisco, helps companies get enterprise ready by streamlining SOC 2, ISO 27001, and HIPAA compliance. Secureframe aims to enable companies to get compliant within weeks, rather than months and monitors 40+ services, including AWS, GCP, and Azur.
Auditboard is especially useful for SOX control testing. It is very convenient having all our information on a single platform. It is easy to communicate PBC requests to clients, store control testing working papers for review, communicate deficiencies and build dashboards to provide visual statistics. Situations where it might not be useful are for organizations that are smaller in size where the templates don't fit well with their internal audit/controls program. There is a significant amount of testing required before using the platform, and adapting working papers to fit in well with AuditBoard
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
As an early-stage startup venturing into SOC 2 for the first time with no in-house compliance expertise, I'd say Secureframe is well-suited for early startups. They walked us through various parts of the process and recommended how to approach certain configurations and controls appropriate for our situation and size. We can easily see Secureframe working for larger companies as well; they seem to have a solid foundation in place.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
We used to perform our Risk Control Analysis (RCA) for each audit's planning in an Excel spreadsheet. Once we purchased the Risk Oversight module, AuditBoard helped us convert the RCA to a system function rather than a spreadsheet. At first, we lost some of the functionality the spreadsheet provided, but AuditBoard did continue to help us build and work towards a solution more similar to what we previously had. Though happy with it, it's still not perfect. As one example, I'd like to be able to link actual Ops Audit work steps that cover the risk and controls being outlined in the RCA, rather than just adding a comment to state which steps cover them. More of a preference, I suppose.
I also had demoed their beta Resources and Scheduling module, but it didn't have enough functionality at the time to work for how we put the quarterly Internal Audit schedule together (using Excel). One thing I recall was that you couldn't pull in SOX controls or non-chargeable work (such as education or administration) to auditor's schedules; it was meant to schedule the Ops Audits only. It is possible they have already fixed or improved this; I just haven't seen the updated version.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The new audit module had a few minor bugs during setup on our 2nd pass, but nothing that broke. Confident it'll smooth out the longer it's live in Prod.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The Questionnaires feature (which assists in RFP's, security questionnaires, etc) could be designed a lot better. I see what they were going for, and based on their track record for improving features I'm sure it will get a refresh, but in it's current state it is the only features that I do not use.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I remember there were a lot of sync issues when I used the internally developed software, but that's probably because a few people were working on the same project at the same time. I have not come across this issue in AuditBoard
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
From purely comparing marketing sites (unable to trial others), Secureframe had better first time SOC 2 audit documentation and explanations for free to ease you into understanding the processes.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Hard to quantify. It was cheaper than the tool we had and we were able to get rid of standalone tool for surveys. overall, just better user experience for all.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
