TechValidate Research on CyberGRX


CyberGRX Case Study

Fortune 500 Consumer Products Company

Introduction

This case study of a Fortune 500 consumer products company is based on a September 2022 survey of CyberGRX customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“CyberGRX Predictive Risk Profiles provide me dynamic and immediate data on my third parties that I previously did not have with assessments alone.”

“CyberGRX is helping me improve my third-party cyber risk management program through the ability to continuously monitor and analyze my third-party risk data beyond assessments and workflows.”

“Assessing the risk of using a 3rd Party has been great.”

Challenges

What were the key pain points experienced prior to using CyberGRX:

  • No benchmarkable data to share with C-suite and/or Board

Use Case

What do you use CyberGRX for:

  • Assessing third-party vendors as part of the procurement process (vetting and onboarding)
  • Assessing third parties as part of a compliance program (assessment audits)

Said that CyberGRX Predictive Risk Profiles are “used frequently by me and/or my team in the absence of self-attested assessments.”

Results

The surveyed company achieved the following results with CyberGRX:

  • Realized a return on their investment with CyberGRX immediately.
  • Compared to other tools, how would you rate the following features of CyberGRX:
    • Auto-Inherent Risk Ratings: Best In Class
    • Predictive Risk Profiles: Best In Class
    • Framework Mapper: Best In Class
    • Threat Profiles: Best In Class
    • Third-Party Threat Intelligence Scores & Data (RiskRecon and Recorded Future integrations): Best In Class
  • Said that due to the Exchange model and Predictive Risk Profiles that CyberGRX provides, “I have visibility to data on 100% of my third parties under management.”
  • Reported that CyberGRX platform is extremely important (critical) to their overall third-party cyber risk management program.




About This Data

This data was sourced directly from verified users of CyberGRX by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on CyberGRX