NAVEX IRM (formerly Lockpath) Reviews

Keylight is completely configurable and extremely adaptable. It has powerful yet simple-to-produce reporting capabilities that enable metrics and provide transparency with ease.

I can't stress enough how easy the configuration (Admin) capabilities are to learn and to use. And for those times where help is needed, the Lockpath Support and Professional Services teams are first class. Always eager to help and it is evident that customer service is a high priority for the company.

Workflows and notifications can be easily built which can provide a centralized location for many use cases, including: Identifying and monitoring risks; Recording regulatory and other requirements, controls associated with those requirements, including assigning ownership and review of those controls, and Audit projects which are tied directly to the controls; Vendor Management, including monitoring compliance and tying to any applicable risks. I guess what I'm trying to say is, the Keylight GRC platform helps take some of the complexity out of GRC.

The above are just a few of the many possibilities. Because the tool is so easy to configure, I tell my colleagues to "tell me your dream"-- I'm usually able to get pretty close.

Sometimes the tool is less than intuitive. Don't get me wrong-- I still stand by my statement that it is extremely easy to use-- but sometimes the way to do something is not the way you'd imagine. Most times, there is a way to do what you need to do, it's just not always the way you'd expect. Lockpath Support is always an excellent resource to work through these situations.

This is a fully customizable solution to help meet GRC management needs. This has also been expanded into other areas, including assessments, asset reviews, documentation management/reviews, testing management, vendor management, and a host of other things.

The online doc is ok, but may need updating. We have also run into reporting limitations, and the software can struggle with graphic reporting if the number of records exceed some preset quantity. The other is very specific; when creating a new field and setting the character parameters, the parameters are permanent for the life of the field. For example, if a text field is set for 100 characters, but a year later, you find a need to allow for 500 characters, the existing field cannot be redefined. A new field needs to be created to allow for the expanded setting. So when you are trying to create a field and be cognizant of the space (i.e. limiting to 100 characters), you are limiting the future-growth of the data this field may manage.

The same goes for the tolerances of the numeric fields. Once the parameters (number of spaces before and after a decimal point) are set, there is no changing the field. It must be replaced with a new field, rather than having an effective recalculation process.

Excellent customer service, intuitive and easy to use. layout and menus are well suited for navigation and functionality.

On premise solution has some bugs to work out. software could be faster when clicking through and going from page to page.

What I like most about LockPath Keylight is the flexibility and ease of use use. Unlike other GRC tools, I do not need an entire support team to make rapid changes and add value.

What I like least about LockPath Keylight is occasional slowness and enhanced historical reporting (which requires additional cost).

Lockpath Keylight is highly configurable and easy to navigate from an administrative perspective with coaching from the Professional Services team. The speed of implementation is primarily based on the tool owner to provide documentation and dedicate time to understanding the system. The user-friendliness of the front end of the tool ultimately falls on the administrator as the system is pretty much a blank slate upon purchase. The Quickstart implementation structured our system’s foundation and the remainder of the configuration was able to be completed either by the Professional Service team or by an internal administrator of the system.

The Professional Service and Support teams have been highly responsive to questions and enhancement requests for the system. Professional Service hours have been very useful in working through more advanced requirements and gaining a more robust training to the system.

As noted above, the Risk Keylight application is 100% configurable which means there is no direct out-of-the-box workflows or fields. This can be an advantage or disadvantage based on the needs of your company. If your company is able to detail specific requirements, the configuration of basic workflows is quick to implement. The Compliance Keylight application came with a few pre-built workflows and forms which has been helpful to quickly input data and see results in the system.

The customization options along with graphical tools help in visualizing the risks with respect risk scores.

It gets slow to load some of the links to its own web pages. IT takes a lot of time to transition between the Keylight modules.

ease of development and customization of the product, the ease of fitting it to your business operations, not fitting the business to the tool. i also like the responsiveness of the customer support people.

a few minor enhancements that they have in their queue to eventually build out and the fact that i have to wait for them.

Framework is very flexible to meet the needs of most organizations, inexpensive for the architecture.

Would not be a good fit for companies that want something that is more plug n play where you select the regulatory requirements, you yes/no the risks and it outputs dashboards.

Highly extensible and customizable for our workflows and reporting requirements

The administrator UI isn't in the usual structure which takes some time to get used to but it is the same in every module so once you are used to the layout it is the same for every piece in the platform.

The SAAS platform means I don't have to have a staff dedicated to keeping one application running. Keylight is easy to use and understand and can provide the workflows we need.

The integrations are priced individually. The API isn't "public" and could use some tweaking. The ambassador/agent model is a bit old as is uploading CVS files for data modification.

Improvements of the tool with each upgrade makes it even more flexible for all users and skill levels.

I find that building out workflows involves too many steps and can be a bit cumbersome. Additionally, converting compliance documents to MS Word formats could be improved.

The ability to customize all workflows to internal processes and requirements. No other tool we assessed provided this flexibility.
The ability to leverage data across modules to ensure information is consistent and linked for reporting purposes.

The platform is not quite as intuitive as other tools but going through Keylight training or leveraging Lockpath's managed services helps greatly.

We like using Keylight because it allows us to keep track of all of and stay up to date with all of our policy and compliance documentation. The platform also holds people (performers) accountable and ensures due diligence with regards to their relevant tasks.

The roles can be a little confusing, when we set up users, it is sometimes a challenge to determine what access they need, especially for people in IT.

Controls framework and auditability are key. They help drive accountability, which drives real change.

Reporting can be tricky. Overall, the UI can be trick and take awhile for the averae user to get used to.

I like that it helps me organize my GRC functions, helps automate things and takes out a lot of the manual work that GRC usually requires. It is like another resource .

It can be confusing at times knowing where to go to connect different documents and functions. It is not the most user friendly software. It does take a mindset that is not afraid to explore and ask questions.

*Saves me time issuing, following up, and tracking our vendor due diligence efforts.
* Compliance tracking for staff awareness events can be configured with ease.
* Support availability, product knowledge, and communication is top notch.

* Initial familiarity with how the applications work and inter-operate isn't the most intuitive.
However, training videos are freely available and help speed up the learning curve.