NAVEX IRM (formerly Lockpath)

Keylight is completely configurable and extremely adaptable. It has powerful yet simple-to-produce reporting capabilities that enable metrics and provide transparency with ease.

I can't stress enough how easy the configuration (Admin) capabilities are to learn and to use. And for those times where help is needed, the Lockpath Support and Professional Services teams are first class. Always eager to help and it is evident that customer service is a high priority for the company.

Workflows and notifications can be easily built which can provide a centralized location for many use cases, including: Identifying and monitoring risks; Recording regulatory and other requirements, controls associated with those requirements, including assigning ownership and review of those controls, and Audit projects which are tied directly to the controls; Vendor Management, including monitoring compliance and tying to any applicable risks. I guess what I'm trying to say is, the Keylight GRC platform helps take some of the complexity out of GRC.

The above are just a few of the many possibilities. Because the tool is so easy to configure, I tell my colleagues to "tell me your dream"-- I'm usually able to get pretty close.

Sometimes the tool is less than intuitive. Don't get me wrong-- I still stand by my statement that it is extremely easy to use-- but sometimes the way to do something is not the way you'd imagine. Most times, there is a way to do what you need to do, it's just not always the way you'd expect. Lockpath Support is always an excellent resource to work through these situations.

This is a fully customizable solution to help meet GRC management needs. This has also been expanded into other areas, including assessments, asset reviews, documentation management/reviews, testing management, vendor management, and a host of other things.

The online doc is ok, but may need updating. We have also run into reporting limitations, and the software can struggle with graphic reporting if the number of records exceed some preset quantity. The other is very specific; when creating a new field and setting the character parameters, the parameters are permanent for the life of the field. For example, if a text field is set for 100 characters, but a year later, you find a need to allow for 500 characters, the existing field cannot be redefined. A new field needs to be created to allow for the expanded setting. So when you are trying to create a field and be cognizant of the space (i.e. limiting to 100 characters), you are limiting the future-growth of the data this field may manage.

The same goes for the tolerances of the numeric fields. Once the parameters (number of spaces before and after a decimal point) are set, there is no changing the field. It must be replaced with a new field, rather than having an effective recalculation process.

Excellent customer service, intuitive and easy to use. layout and menus are well suited for navigation and functionality.

On premise solution has some bugs to work out. software could be faster when clicking through and going from page to page.