Agiliance-On-Demand ™

Overview

Agiliance IT-GRC is the first purpose-built software solution to automate the interdependent and complementary functions of IT governance, risk and compliance. Agiliance On-Demand is designed to be delivered as a SaaS (Software as a Service) offering. Agiliance On-Demand delivers lower cost of ownership and rapid time-to-compliance leveraging all the capabilities of IT-GRC.

Regulators and Auditors are requiring mid-size and large enterprises alike to comply with standards and regulations that pertain to their lines of business. Rules about safeguarding privacy and protecting personal financial information now apply equally to the mid-size enterprise and the multi-national conglomerate.

Assessments conducted by Agiliance On-Demand can reach down into the individual asset level to deliver weighted risk and compliance scores that eventually roll up into consolidated dashboards 

Agiliance On-Demand, has the ability to measure risk and compliance for assets across the organization and delivers self-assessment capabilities using a web-based eSurvey process with full workflow capabilities designed in. Built-in libraries containing more than 10,000 controls spanning standards, regulations and frameworks to ensure compliance with regulations such as Sarbanes-Oxley, GLBA, Basel II; standards such as ISO 17799, ISO 27001 and NIST SP800; and frameworks such as CobiT and FFIEC. Additionally 20,000 vulnerabilities are imported from the National Vulnerabilities Database.

Sophisticated reporting and roles-based dashboards allow business executives, compliance and audit experts, as well as IT security and operations personnel to take actions based on information and guidance presented by the application on managing IT risk and compliance.

Agiliance On-Demand™ delivers an IT Governance, Risk and Compliance application leveraging a standards-based five-step process - Agiliance On-Demand provides a top-down visibility into all IT risk and compliance functions using data gathered from throughout the organization. The Vendor & Partner solution extends this capability outside the enterprise to monitor risk and compliance related to external stakeholders as well. Third-party self-assessments can be conducted without storing proprietary information and by enabling a mechanism for vendors and partners to pre-pay their own assessments.

Features

• Out-of-the-box standards-based risk and controls frameworks
• Self-assessment using eSurveys to collaborate with multiple stakeholders
• The ability to include data from security automation tools like scanners and change management systems
• Closed-loop workflows to optimize and monitor mitigation and remediation plans
• Roles-based dashboards with custom reports to deliver a top-down view into the enterprise risk posture

Benefits

• Ease of deployment, ease of use and embedded services management as an On-Demand solution
• Faster time-to-compliance - the speed and efficiency of assessments and approvals results in more business quicker.
• Organizations can now implement a fast repeatable process to assess and manage vendors
• Scale assessments to monitor additional servers, applications, processes and external parties
• Certification costs are reduced by enabling web-based self certification.