ZenGRC Reviews

Before ZenGRC we were living in spreadsheet hell - endless back-and-forth emails, no central management, and audits were a nightmare to coordinate. Now everything lives in one place across SOC2, HIPAA, NIST, and ISO 27001.

What really sold me is how it handles audit season. Our external auditors fill out ZenGRC's import spreadsheet with their requests and control mappings, it flows right into the platform, and they interact directly with our SMEs to ask questions and approve evidence. We're not playing middleman anymore. A team of 1-2 people can manage a full company audit now.

We've also built PowerBI dashboards pulling from ZenGRC's API, and even have a SharePoint security exception form that auto-generates exceptions in Zen. When we've gotten stuck, their team jumps on a Zoom and walks us through it.

Native reporting and dashboards are limited - that's why we ended up building our own in PowerBI. Sorting and filtering in the UI still needs work. They've been receptive to feedback and we've gotten features added, but development can be slow.

I like being able to see what documents I've added for each control for times when I may have missed importing one of them. It's also easy to access via SSO.

I don't have anything I dislike about ZenGRC.

Central repository for documents requested for SOC-1 audits, which is easy to use.

.Modern user interface, end-to-end risk & compliance management platform capabilities

Lack of advanced reporting and analytics

end-to-end

ZenGRC has allowed us to make major improvements in our compliance program through efficient sharing of evidence and mapping controls to various frameworks and standards. It allows our internal and external audit teams to access evidence directly from the audit requests, reducing the back and forth between users.

ZenGRC should have an archive feature that allows you to archive old tasks and requests.

ZenGRC has helped solve issues with evidence gathering for audits because assignees can upload evidence directly and share with the auditors.

Automating the work flow. It's so easy to do that and it's integrated with most of the softwares that we use. It's super easy to implement and we use it all the time ! Customer support is also really nice and has helped in giving swift responses to any questions we have about the large number of features available.

none. Regular updates will be greatly appreciated

ZenGRC is helping us mitigating the IT risk management.

It maintains a strong relationship with the stakeholders by keeping all the records in order.

It is not ideal for complex kind of workflows where the specialized report is needed

It is suitable for maintaining a good workflow by keeping all the records in place. It also helps to build a strong relationship with the stakeholders. I benefited me by reducing the manual labor.

It is easy to use, customisable tool that can manage multiple compliance initiatives.

ZenGRC has limited reporting capabilities.

It has simplified compliance management by providing a centralised framework for managing multiple regulations and standards. It also helps in reducing risk thereby improving overall security posture.

Being newer to leveraging a GRC tool, what attracted me most to ZenGRC was the functionality and manageability versus the others players in that space. "Easy-button"

There are no downsides to ZenGRC from my perspective, however we did struggle with where to start in the usage of the tool. We simply leveraged a 3rd-part expert to assist.

Centralized document repository for policies, procedures, and network diagrams, 3rd-party risk questionnaires, and pulling all of the numerous governances cross mappings for our global sites into one tool.

I like the following:

1. Bulk upload of Audits

2. Ownership change for the tasks at bulk

The quick link bar helps to view everything on the same screen, thus helping in easy navigation across the tool.

The tool does not allow organization branding, such as adding logos.

We onboarded ZenGRC for centrally managing our controls and audits.