CyberGRX is a cloud-based cyber risk management platform which helps large enterprises with data collection and assessments. Key features include compliance, business process control, security engagement, vulnerability scanning, performance metrics, and a self service portal.
The platform enables network teams to continuously monitor their ecosystem and create prioritized risk-mitigation strategies for third-parties. Network security teams can add third-parties to the CyberGRX exchange, order appropriate tiers of assessments, track assessment progress in Exchange, and receive updated and validated assessments with prioritized gaps in a table.
CyberGRX allows third-parties to complete multi-tiered assessments, identify remediation strategies, and share results with multiple upstream business partners. The platform enables users to add comments on assessments and accept reviews of materials, such as SIG and SOC II assessments. Vendors can manage their assessment data and share it with business partners on an individual basis. The system integrates with BitSight to help users measure company security performance.