Continuum GRC Reviews

The integration with existing technologies at Cisco SD-WAN was made nearly seamless by the ContinuumGRC team. The tooling also quickly enables measuring to other critical compliance initiatives through their advanced mapping capabilities, saving the organization money and resources that are critical in today's compliance environment.

We don't have negative feedback in our implementation of the ContinuumGRC tooling.

Thank you for your feedback! The expertise and use case suggestions that you and your team have made over the years have helped us to innovate and improve our solution.

The coverage of all standards we need compliance with are all available in one place and we can seamlessly switch between the various standards as well as evidence shared across many attestations making compliance extremely easy. The forms are all upto date with the various standards and the UI is being constantly being improved making it easier and easier to use. Process and procedure feedback is incorporated fairly quickly as they listen to input and act on it. Great tool overall - would not want to switch - In fact we are bringing in more projects into the tool to leverage it's capabilities.

For a while the migration from control section to control section was messy and it was hit and miss when we used the Jump to control feature, but as of recent updates this seems to have gotten much better and we dont see the issues anymore - Also the multi user edit restriction was a pain to deal with in a multi-person team but again our input was well received and that seems to have been addressed - UI could still be better but it is evolving.

We love it when our customers provide us with feedback. It is the use cases we did not think of that helps us innovate and be the better solution. Thank you!

I love the fact that our audits are tied directly to NIST requirements. It helps with research on NIST needs as they are not always straight forward. Our assessments were built by Federal agencies for Federal use so it is not always straight forward.

There are issues with versions. The new version creates a master document, if not done correctly you can end up with multiple versions. It’s confusing and annoying because it appears it has lost data. You spend time adding info back only to find out you are just working with the wrong file. Also, I would like better options for the download of data to include csv. This would help with data entry when offline because you could still function.

Thank you for your feedback! Navigating NIST standards is certainly a challenge, and we are constantly working to flatten the learning curve, while making it easier to navigate the complexities of multiple compliance programs.

Ease of use. Ability to track progress and write notes. Ability to take feedback from auditor with notifications. Auditor is notified when notes are added. Auto saving. Ease of uploading evidence. Track overall progress and % complete. Easy to identify and move to sections that need more work.

Performance has steadily increased form acceptable to very good. Some small issues during transfer from one year to the next. Customer service addresses issues promptly.

Thank you for your great feedback. We will continue being attentive to your requests and suggestions. As much as we try to think of everything, it is your use case that inspires us to improve everything we do. Thank you!

Ease of use, reproducability year over year.

The past audit file upload repository could use a bit more organization, but it is VERY useable as is;

Thank you for your review! We strive to provide the perfect platform for risk assessment, risk management and your compliance requirements. Your collaboration helps us become even better. Did you know that auto mapping synchronizes evidence with all your other frameworks? Also, the new evidence manager is searchable, sortable, manageable, and re-nameable just like a local file system is? Thank you!

Security. Ensuring TFA, and to some extent the time-out feature, gave me comfort.

Navigation. While I could eventually figure out where I needed to be, it was not intuitive to me. I don't know if this is related to the software, but the questions we had to answer were vaguely worded and difficult to understand (and I have two post-college degrees). It was hard to tell what the windows meant that kept opening up, the timer on the tab, and more than once I lost valuable work when I failed to scroll way to the bottom of a given screen and hit "continue" while multitasking. The whole experience was incredibly frustrating - not just because of the vagueness and repetitiveness of the questions, which frequently required going to the vendor to ask questions of clarification, but to navigate as well.

Thank you for your feedback. The AICPA SOC 2 trust principles are a little repetitive and vague for certain. The hubris of the accounting industry thinking they are qualified to conduct security audits is certainly frustrating and puts the public at risk! It seems that your frustration is associated with the organization's requirement to write control implementation statements. This is something that your auditors are forbidden to do. Our platform simply facilitates the production and protection of customer data and assessors work.

Ability to map the control statements to different standards such as NIST SP 800-51 and SOC-2 allows us to create the implementation statements once and have the tool automatically map them to the corresponding controls in various standards. The policy templates were invaluable.

The Save feature sometimes overwrote previous changes. The reporting of status per control can be improved.

Thank you for your feedback! We heard you and think you will like the enhanced Status Indicators with increased visual and text indications. Also, the new risk heatmap priority dashboards have been getting rave reviews from auditors and users alike.

Breath of certification offerings from a single platform is the strongest feature of Continuum GRC, including latest version offerings. The answers and evidences can be pulled from one certification to another saving time. The software offers 'Consultant View' and 'User View' with pointers to help facilitate the key questions and answers, again boosting productivity. Evidence gathering is also flexible and adaptable.

Scaling the software across a big team does require some effort. Furthermore, some of the auto bot reminders on the tasks can be confusing on answers already provided. Once a user gets comfortable with the work flow, then it becomes a non-issue. However, it can be an issue in the beginning.

Thank you so much for your feedback! We appreciate your suggestions for improvements and it inspires us to innovate. Our mission is to support professionals like you with expert solutions.

The user interface was intuitive when I started using Continuum GRC over two years ago. Since then, I've noticed multiple improvements around efficiency and ease of use, so I know the developers are active, and the product is evolving.

Initially, the product went through some growing pains like any new product does. Certain parts of the user interface were clunky and some of the functionality was lacking, but most of these issues were purely aesthetic - nothing that impacted productivity.

Thank you for your feedback. We appreciate client suggestions for ways to improve the experience, usage and features.

Continuum GRC helped was a big part of our initial FedRAMP and SOC 2 audits. Being able to keep files organized year to year is valuable and really streamlines the process of collecting data.

Some of the UI is not terribly intuitive. It's fine once you get the hang of it, but it would be nice to be a little more user-friendly.

Thank you for your feedback! Our first mission was to be a solid workhorse, and then a show horse. The new "2 clicks to risk reduction" interface, new priorities dashboard and streamlines Control Groups will hopefully improve your experience. We do look forward to your candid feedback. It helps us improve!

Being able to have all the Controls in one central location was a plus. Answering them, adding Artifacts, etc by Control families helped keep the focus of the questions. Integrating the assessment to our business was easy.

Did not like that you had to name the role on every CCI under each control. It should be done by the control and inherited to the CCIs below. Also, if you attach a document to a multiple controls, it copies that artifact that many times, as to have the same document multiple times making your Artifact larger than it actually should be.

Thank you for your review. We appreciate feedback as it helps up improve the Continuum GRC platform. Mapping the Responsible Role to each control requirement would be easy with our auto mapping, as would also common evidence. The challenge is however for those cases the response is indeed different.

Single pane view of multiple compliance status. Easy and quick navigations. Flagging of controls, provision to add Field notes, email notifications and follow-up.

We did face slowness sometime ago that was reported and has been taken care of immediately. After which its blazing fast.

Thank you for your review! We appreciate your support and look forward to supporting your team.

Easy to use to upload artifacts and track status.

Nothing comes to mind, we haven't had a negative experience.

Thank you for your review! We love client suggestions and will always strive to provide excellent features, value and service.

Easy to use and provided detailed explanation

Sometimes lost the data after entering . IT should have Auto Save option after going to next question

Thank you for your feedback! While autosave is an integral feature, along with automatic saving when a user's session expires from inactivity in the system, there may be an opportunity to implement a more robust time based autosave as well. Thank you again, and enjoy the power of Continuum GRC. Your Roadmap to Risk Reduction!

Easy to use and comprehensive. Made sure we checked all the blocks, protected our networks, and performed exceptionally well on the audit.

No real cons, we were able to learn and use the product quickly and it is easy to reference and update.

Thank you for your review! We appreciate your support and look forward to collaborating with your team.