KnowBe4 KCM GRC Platform: Close to the best with the best value.
Pros
- Mapping controls across different compliance frameworks. It saves you a ton of time and energy!
- Performing risk assessments at the granularity that you prefer, splitting assessments across departments and teams if you wish.
Cons
- Vendor management has a few kinks to work out. We want to be able to do internal questionnaires for vendors as a compliance checklist before we sign off on a contract. Nothing in the works yet, but there are a few workarounds.
- The navigation between different tasks in scope is clunky, and it's easy to lose your place, and it forces you back to the main page of the scope to retrace your steps.
Return on Investment
- Just having the capacity to do things the right way, and formally, has driven some of our compliance efforts.
- Due to licensing limitations, we likely overspent on seats to the platform that we didn't need but also didn't want to miss out on.
Other Software Used
Elasticsearch, CrowdStrike Falcon Endpoint Protection, Acronis Files Connect, Veeam ONE
