LogicGate Reviews & Pricing

Key Features

• Enterprise Risk Management: Continuously monitor critical processes for any sign of vulnerability. Perform customizable calculations to predict the potential impact of a disaster. 
  • Workstreams: Set up automation-driven workflows for document collections, notifications, deadline-triggered requests and transparent tracking. 
  • Assessments: Stakeholders can assess the risk register across multiple business domains. Use assessment data to prepare effective mitigation strategies. 
  • Questionnaires: Prepare dynamic questionnaires to process data from interview and survey inputs. 
  • Risk Alignment: Convert assessment data into task items with deadlines and notifications and assign them to individual risk owners. Track the status of ongoing remediation activities and send alerts to related stakeholders. 
  • Visual Data: Run custom analytics and reporting for a real-time heat map of critical risks across the program. 
• COSO Framework: Integrate the Committee of Sponsoring Organizations (COSO) framework guidance on risk strategy and performance. Automatically calculate risk scores and perform risk assessments based on enterprise and operational risks, impact, likelihood, and vulnerability rubrics. 
  • Centralized Tracking: Eliminate information silos and track logged risks and remediation measures from a centrally accessible location. Run built-in reports with complete transparency. 
  • Analytics: Study the relationship between the organization’s operational and functional level goals and available risk scores. Notify risk owners of pending tasks and deadlines. 
• Issues Management: Prioritize issue mitigation based on automatically calculated issue urgency scores and track progress with built-in reporting and dashboard. Send in-app and email notifications to keep risk owners informed. 
  • GRC Initiatives: Track and manage issues, remediation strategies and risk ownership via one central location. 
  • Visibility: Get granular details on logged issues and mitigation responses with out-of-the-box reporting and status reports. 
• Regulations: Leverage a regulatory inventory index to define regulatory categories. Run compliance assessments to identify potential non-compliance risks and sanctions. Create plans to incorporate regulatory changes and assign task ownership to relevant personnel. 
  • Tracking: Use the corrective action plan (CAP) module to solve existing issues, track previous violations and minimize negative publicity. 
  • Regulation Partnership: Partner with Ascent to track compliance using AI. Get access to over 125 regulators, gain insights from new markets, products, industries and regions, and identify coverage gaps. Available regulators include SEC, FDIC, OCC, FINRA, CFTC, FinCEN and more. 
  • Obligations: Use AI to identify important obligations. Automatically update regulators and get granular data on all obligations, including laws and standards. 
• IT Security: Protect IT assets and infosec risk processes with effective controls in compliance with industry standards. 
  • ISO 27005: Track risks in the framework with content designed for ISO/IEC 27005:2018(E)’s information security risk management process. Identify, assess and mitigate risks and record all vulnerabilities in a secure database. Calculate risk scores of assets with NIST 800-206 guidance following ISO 27005 recommendations. 
  • Real-Time Protection:  Continuously update residual risk reports, assessments and controls testing activities. Assign risk tolerance thresholds and automatically administer mitigation measures on crossing over. Eliminate ineffective controls and processes. 
  • Evaluation: Evaluate critical procedures for vulnerabilities. Use a flexible data model to record elements and identify threat actors and events. Follow up on evaluations with reports and remediation plans. 
  • Controls Register: Prepare a custom risk assessment methodology with personalized controls and rules. Apply appropriate control frameworks, including ISO 27002, NIST 800-53 and NIST CSF. 
  • Vulnerability Management: Prioritize mitigation of vulnerabilities with the most impact on critical business processes. Keep a record of essential assets, assessments, vulnerabilities and treatments with built-in workflows. Run reports to map the company’s vulnerability status and import records from Risk Cloud Tenable.io integration, third-party integrations or CSV files. 
• Third-Party Risk Management: Access templates and applications to manage relationships from the same portal. 
  • ISO 27001: Map relationships with third-party vendors with pre-built questionnaires aligned with Annex A information security requirements framework. Record proprietary data, financial information, intellectual property and employee details according to ISO/IEC 2700 family of standards. 
  • SIG Lite: Optimize vendor relationships with a questionnaire created by Risk Cloud’s third-party risk management SIG Lite app. Quickly verify all incoming vendor information, automate daily tasks and collect vendor responses for maximum visibility. Get significant insights into third-party relationships with 329 questions covering 18 domains. 
  • Procurement and Contract Management: Monitor service level agreements (SLAs) and vendor contracts and schedule due diligence on all associations. Send automated notifications for key events and maintain a central database of vendor data, including billing information, contract details, SLAs and payment terms. 
  • Compromise Assessment: Measure the impact of third-party vulnerabilities to manage risks. Use automated workflows and templates to initiate impact assessments, link vulnerabilities and register information for complete visibility into vendor relationships. 
• Audit Controls Management: Use comprehensive reports and automated workflows to track audits and control processes. Assess internal controls and policies against AICPA’s five Trust Services Criteria and obtain SOC 2 compliance. The platform is HITRUST approved and includes SOX compliant financial reports. Run CMMC compliant self-assessments. Audit management frameworks include PCI DSS, FedRAMP, HIPAA, FFIEC CAT, NIST 800-171 and more. 
  • Controls Management: Set up automated control assessments at custom intervals. Run real-time auto-generated reports and link controls to the Risk Cloud Controls repository. 
  • Audit Management: Regulate the internal audit process with audit-control testing, reporting and due date reminders. Create and execute a centralized Audit Universe and plan for the entire company. Maintain a central evidence database and prepare in advance for external audits. 
• Compliance: Provides clearly defined regulatory categories and an inventory index. Automatically assign ownership, stay up-to-date on laws and perform risk assessments to identify potential non-compliance penalties. Implement and collaborate on corrective action plans. 
  • Employee Compliance: Maintain a centralized inventory of employee information and policy acknowledgments. Schedule automated reminders and due date alerts for policies. Automatically assign policy acknowledgments and certification requests and get status updates. Create customized workflows to keep up with training requirements and policy attestations. 
• Policy Management: Leverage process automation to request, write, approve and update policies, eliminate duplicate policies, and set up reminders. Centralize the policy administration system to directly link policies and procedures and eliminate information silos. Create hierarchical maps connecting risks, regulations and business units. 
• Incident Management: Build a single incident repository to respond faster and standardize the incident playbook. Automate processes with conditional workflow logic and custom rules handling, alerts and activity routing. Identify vulnerabilities, bottlenecks and compliance failures by auditing incident management procedures. 
• Privacy: Stay compliant with consumer privacy laws, including GDPR and CCPA. 
• Business Continuity: Carefully document and execute crisis response tasks in the event of a major crisis or disaster. Set up workflows to identify and safeguard crucial processes and physical, intellectual and financial assets. 
  • Disaster Response Resource Repository: Create a standardized repository of instructions and procedures for reference in an emergency. Store important company information such as asset locations, processes, passwords and business functions in a centrally accessible database. 
• Security: Encrypt all end-user data both during transit and at rest using best-practice services. Provides fine-grained access controls and Single Sign-On (SSO) delivered via SAML 2.0. Protect the entire infrastructure with firewalls. 
• Integration: Integrate with third-party apps via a secure RESTful API. Application Programming Interface requires OAUTH 2.0 authentication. 

Limitations

•  The platform experiences occasional bugs and glitches. 
•  The standalone reporting feature has limited functionality. 
•  No way to rate control effectiveness. 

Suite Support