TechValidate Research on CyberGRX


CyberGRX Case Study

Medium Enterprise Financial Services Company

Introduction

This case study of a medium enterprise financial services company is based on an August 2022 survey of CyberGRX customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“CyberGRX Predictive Risk Profiles provide me dynamic and immediate data on my third parties that I previously did not have with assessments alone. CyberGRX is helping me improve my third-party cyber risk management program through the ability to continuously monitor and analyze my third-party risk data beyond assessments and workflows.”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select CyberGRX include:

  • Process was focused on assessment completion and not data analysis

Use Case

The key features and functionalities of CyberGRX that the surveyed company uses:

  • Assessing third parties as part of a compliance program (assessment audits)
  • Continuously monitoring third parties as part of a cybersecurity program
  • Predictive

Said that CyberGRX Predictive Risk Profiles are:

  • Used frequently by me and/or my team in the absence of self-attested assessments
  • Used frequently by me and or/my team in conjunction with self-attested assessments

Results

The surveyed company achieved the following results with CyberGRX:

  • Realized a return on their investment with CyberGRX immediately.
  • Compared to other tools, how would you rate the following features of CyberGRX:
    • Auto-Inherent Risk Ratings: Best In Class
    • Predictive Risk Profiles: Best In Class
    • Framework Mapper: Best In Class
    • Threat Profiles: Comparable
    • Third-Party Threat Intelligence Scores & Data (RiskRecon and Recorded Future integrations): Comparable
  • Said that due to the Exchange model and Predictive Risk Profiles that CyberGRX provides, “I have visibility to data on more than 10% of my third parties under management.”
  • Reported that CyberGRX platform is very Important to their overall third-party cyber risk management program.




About This Data

This data was sourced directly from verified users of CyberGRX by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on CyberGRX