TechValidate Research on CyberGRX


CyberGRX Case Study

Automatic Data Processing, Inc.

Introduction

This case study of Automatic Data Processing, Inc. is based on a May 2023 survey of CyberGRX customers by TechValidate, a 3rd-party research service.

“Having a third-party, award winning, and credentialed assessment of our security posture drastically reduces the noise from unvalidated opinions of our security posture by scoring agencies in the marketplace. CyberGRX is best in class at being this third-party for us.”

Challenges

What key pain points did you experience prior to using CyberGRX?

  • Too much time spent completing bespoke assessments
  • Urgent and unplanned bespoke assessment requests for presale procurement
  • A lack of program success metric data (time saves, acceptance rate on shares, etc.) or benchmarkable data to share with the C-suite and/or the Board
  • A lack of control over cyber reputation and risk posture due to use of security ratings and outside-in scanning tools
  • Too much time needed to address customer follow up questions or requests post-assessment share

Use Case

What do you use CyberGRX for?

  • Completing a self-assessment requested by a customer
  • Proactively sharing our CyberGRX assessment with customers who send us assessment requests outside of CyberGRX
  • Utilizing CyberGRX assessment and profile insights to prioritize improvements to our program
  • Establishing benchmarks and creating reports for the C-Suite and/or Board

When asked what role the CyberGRX assessment occupies within their overall program, they said “It is the default assessment used for all current and prospective customer requests.”

In the next 6-12 months, which of the following ways will you use CyberGRX to improve your risk posture?

  • Authorize more CyberGRX customers access to our CyberGRX assessment data
  • Speed up deal flow by proactively sharing our assessment with non-CyberGRX customers/prospects during sales process
  • Update our CyberGRX profile & refresh our assessment

Results

Compared to other tools, how would you rate the following features of CyberGRX?

  • CyberGRX Assessment: Best In Class
  • Proactive Sharing: Best In Class
  • Framework Mapper: Best In Class
  • Threat Profiles: Best In Class
  • Evidence Upload and Sharing: Best In Class
  • Assessment Results and Findings: Best In Class
  • Predictive Risk Profile: Best In Class

Thinking about the challenges typically encountered in a third-party cyber risk management program, how well has CyberGRX helped you improve your overall program management?

  • Too much time spent completing bespoke assessments: Significantly reduced this challenge
  • Urgent and unplanned bespoke assessment requests for presale procurement: Significantly reduced this challenge
  • Lack of program success metric data or benchmarkable data to share with the C-suite and/or the Board: Significantly reduced this challenge
  • Lack of control over cyber reputation and risk posture due to use of security ratings and outside-in scanning tools: Significantly reduced this challenge
  • Too much time needed to address questions or requests post-assessment authorization: Significantly reduced this challenge

On a monthly basis, they said that CyberGRX has contributed more than 15 hours of time savings within their third-party cyber risk program.

CyberGRX has enabled us to:

  • Share our security assessment data with any customer
  • Reduce time spent on assessment requests resulting in faster deal flow
  • Have higher confidence in our risk posture and cyber reputation
  • Effectively prioritize our cyber approach, remediation, and refresh through a single assessment
  • Establish clear benchmarks and create reporting for the C-Suite and/or Board




About This Data

This data was sourced directly from verified users of CyberGRX by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on CyberGRX