February 03, 2020
KnowBe4 KCM GRC Platform: Close to the best with the best value.
We are currently using the KnowBe4 KCM GRC Platform in IT and in our legal team. There are a few users that are members to be able to submit audit evidence, but they don't have much function outside of that. We're using to perform internal IT-related audits, risk assessments, and vendor management. It's excellent at the first two objectives, giving us a snapshot look at where we stand for various compliance requirements at a glance. It also speeds up our audit times when we have external audits performed.
- Mapping controls across different compliance frameworks. It saves you a ton of time and energy!
- Performing risk assessments at the granularity that you prefer, splitting assessments across departments and teams if you wish.
- Vendor management has a few kinks to work out. We want to be able to do internal questionnaires for vendors as a compliance checklist before we sign off on a contract. Nothing in the works yet, but there are a few workarounds.
- The navigation between different tasks in scope is clunky, and it's easy to lose your place, and it forces you back to the main page of the scope to retrace your steps.
