360inControl was a game changer for our organization. It helped us tremendously to optimize our processes and to make them compliant where needed. Updating controls is a joy and the reporting tool is phenomenal.

The software portal is very comprehensive and build logical according to the processes of a company. It very intuitive but also covers complex processes like a pro. What I like the most is the option to combine all of our reporting from other certificates like ISO 9001 and others in 360inControl. It is a masterpiece of software especially for larger organizations but also for midsize like ours. It is adaptable and the support is very competent.

At the moment I cannot think of any negative aspect of the software. In the future I would appreciate if an on-premise solution could be offered as well.

We use it in lectures at the Lucerne University of Applied Sciences and Arts to train students for their professional life. Using appropriate tools is a must in today's pressing requirements for fast delivery. We strongly believe that with 360inControl we give our students a very professional and useful tool and prepare them for their jobs. We are very grateful for all the support received by CISS (the company providing 360inControl).

Easy to use, a lot of use cases, superb support and a report which suits management requirements.

Most of all, I regret that I did not find 360 in Control earlier, so that I could have take the benefit for a much longer time. Maybe adding the German BSI Standards could add to a even stronger footprint.

Usability We liked the fact that it is very fast to navigate from one page to the other. However, the interface is not very intuitive if it is the first time using the tool. For example, when going to the dashboard section, there is no data about our audit other than the pie chart that shows there is 1 of 1 audit in progress. This is only useful if there are many audits. We do not know if there is a way to have a better overview of only one audit. The only way we found to have an overview of our audit is by go-ing to the Audit-Audit/Assessment Controls section and check one by one or by generating a report that then creates a table with the status of the controls. Content We found the content to be very extensive. We believe this is one of the advantages of this tool compared to others. There are many standards available and already possible controls mapped to this standard. We are of the opinion that the Wiki section is very limited and difficult to navigate. The search bar does not work and in the individual sections it is hard to find what you are looking for.

Improvements: 1 Dashboard. It would be nice if there was an easy way to have an overview of individual au-dits without having to generate a report. Under the dashboard, there is an option to generate reports based on specific dates, we believe this is not a feature that should be at the begin-ning of the dashboard, this could be at the bottom or as a separate tab. When we click dashboard, we expect to see a nice overview of the current audit(s), not an option to gener-ate reports.   2 Wiki. We believe it would be easier to navigate if under each section there were subsections that are collapsed. As a user, I only care about what I am looking for. For example, under “Audits,” the brief explanation is great, but then under “create an audit or assessment,” this should be collapsed so that we only have an overview like this: • Audits Brief explanation • Create an audit or assessment (collapsed) • Configure and generate report (collapsed) Another example: • Templates Brief explanation • Template details (collapsed) • Template schedule (collapsed) • Template controls (collapsed) Another idea we believe could make the Wiki section more useful is if there was a glossary defining terms and actions. 3 Feedback Messages. Finally, feedback after important actions would be useful. We ran into an issue where the audit was marked “completed” and could not change it to “in pro-gress.” It would have been nice if there was a message stating something like “If you mark this audit comple

It truly brings together all corporate governance topics in one place. It is easy to use and the onboarding period of an organization that starts on a greenfield is very fast. After two half-day workshops we were able to take our organization to the next level. The concept and set-up give us the confidence that we have chosen a tool that grows with us. We particularly like the managed, yet flexible control library and the excellent reporting for audit and risk management.

The system runs stable but the navigation (usability) can be optimised in some places. For one or two fields the makers should add a multi select option. Single select is not enough for some use cases.

Setup and support has been stellar; even importing controls in bulk or customising reports is not an issue. Assessments and audits can very quickly be executed without having to spend hours configuring the system. The controls provided cover the majority of compliance frameworks.

360inControl is easy to use and simple enough to get quick results - be it using built-in controls or creating our own. Using 360inControl, we have been able to cut down the time required to prepare for ISO27001 und 9001 certification significantly, gaining time to actually address risk instead of copy & paste dozens of excel sheets.

The user interface could use some design love; the current version seems to focus on functionality over design (which is not a bad thing per se).

It's a very logical and intuitiv usage of the software suite. I saw the roadmap and I am glad to see the development of the risk part of 360inControl and many new features coming up soon. Finally we have a centralized tool which colleagues of different GRC departments are using worldwide. We could benefit a lot also regarding corporate memory.

Some features are missing but I see on the roadmap that we haven't to wait too long (eg the risk part)

Amount of features and possibilities this software is able to provide

Nothing negative about in my opinion, it really is just awesome!

Many risk categories can be integrated into one simple tool providing a more holistic view of security and compliance issues. Has the potential to go further and become a powerful insight generating tool for top management.

Did not value the actions, qualitative opinion based rating only, so there is a risk of comparing, and thus prioritising, apples with oranges. If I have restricted opex then the tool did not help deciding what actions I need now and which can wait.

- a highclass tool! - maybe I will promote 360inControl at our business

- clearly arranged web ui - a lot work is already done by 360inControl - I can focus on the important things

- there are a lot of fields in the ui which are not mandatory so a lot of empty fields is the result - maybe in some cases too detailed

PCI DSS audit preperation, site and asset checks

Adoption of all desired controls, easy to create audits picking controls from different frameworks or create your own. Good reporting functionality

Needs some time until your familiar with everything but aftrr that you can work accuratly with it

Übersichtlich, Leich verständlich, gut navigierbar

Mehrsprachigkeit z.B Fands für unsere Aufgabe sehr gut.

I Loved how methodological it is, I can see very clearly how much thought and details went into making this a reality for Cyber Professionals, giving us what we need.

It does require some time to get know the tool and understand how to work with it, the vendor provided the required support but it did take time