The integration with existing technologies at Cisco SD-WAN was made nearly seamless by the ContinuumGRC team. The tooling also quickly enables measuring to other critical compliance initiatives through their advanced mapping capabilities, saving the organization money and resources that are critical in today's compliance environment.

We don't have negative feedback in our implementation of the ContinuumGRC tooling.

Great tool and very efficient at what it does - The power is in the backend and the design is really good as we move from standard to standard - Would not want to move to any other tool now..

The coverage of all standards we need compliance with are all available in one place and we can seamlessly switch between the various standards as well as evidence shared across many attestations making compliance extremely easy. The forms are all upto date with the various standards and the UI is being constantly being improved making it easier and easier to use. Process and procedure feedback is incorporated fairly quickly as they listen to input and act on it. Great tool overall - would not want to switch - In fact we are bringing in more projects into the tool to leverage it's capabilities.

For a while the migration from control section to control section was messy and it was hit and miss when we used the Jump to control feature, but as of recent updates this seems to have gotten much better and we dont see the issues anymore - Also the multi user edit restriction was a pain to deal with in a multi-person team but again our input was well received and that seems to have been addressed - UI could still be better but it is evolving.

I like it. I believe it is valuable for me in operations.

I love the fact that our audits are tied directly to NIST requirements. It helps with research on NIST needs as they are not always straight forward. Our assessments were built by Federal agencies for Federal use so it is not always straight forward.

There are issues with versions. The new version creates a master document, if not done correctly you can end up with multiple versions. It’s confusing and annoying because it appears it has lost data. You spend time adding info back only to find out you are just working with the wrong file. Also, I would like better options for the download of data to include csv. This would help with data entry when offline because you could still function.

We are very happy. Good software makes the certification process much easier. The support team is very good and help make the process smooth.

Ease of use. Ability to track progress and write notes. Ability to take feedback from auditor with notifications. Auditor is notified when notes are added. Auto saving. Ease of uploading evidence. Track overall progress and % complete. Easy to identify and move to sections that need more work.

Performance has steadily increased form acceptable to very good. Some small issues during transfer from one year to the next. Customer service addresses issues promptly.

Incredibly Positive.

Ease of use, reproducability year over year.

The past audit file upload repository could use a bit more organization, but it is VERY useable as is;

Audit/level-set with SOC2 TI compliance. There HAS to be a better way! This took dozens of hours of my time to complete, and I was just one of several folks. I can only imagine if the vendor had spent a couple of hours in a personal interview to get the information they needed we could have avoided the extreme frustration, extreme expense, and diversion of attention and time this task with this kludgy software took. Level of effort for the objective seemed way out of balance.

Security. Ensuring TFA, and to some extent the time-out feature, gave me comfort.

Navigation. While I could eventually figure out where I needed to be, it was not intuitive to me. I don't know if this is related to the software, but the questions we had to answer were vaguely worded and difficult to understand (and I have two post-college degrees). It was hard to tell what the windows meant that kept opening up, the timer on the tab, and more than once I lost valuable work when I failed to scroll way to the bottom of a given screen and hit "continue" while multitasking. The whole experience was incredibly frustrating - not just because of the vagueness and repetitiveness of the questions, which frequently required going to the vendor to ask questions of clarification, but to navigate as well.

As FedRAMP consultants and GRC auditors (SCA), Continuum GRC has been tremendous in helping us save time and money in developing the system security plan (SSP) documentation and collecting the evidence to along with it. It's a great value add to any GRC team.

Ability to map the control statements to different standards such as NIST SP 800-51 and SOC-2 allows us to create the implementation statements once and have the tool automatically map them to the corresponding controls in various standards. The policy templates were invaluable.

The Save feature sometimes overwrote previous changes. The reporting of status per control can be improved.

This is a highly flexible and scalable compliance platform. Gamut of certifications are available under one umbrella. Furthermore, the team is great to work with, and they truly work towards your success. I am very satisfied and a repeat customer since many years now. Highly recommended.

Breath of certification offerings from a single platform is the strongest feature of Continuum GRC, including latest version offerings. The answers and evidences can be pulled from one certification to another saving time. The software offers 'Consultant View' and 'User View' with pointers to help facilitate the key questions and answers, again boosting productivity. Evidence gathering is also flexible and adaptable.

Scaling the software across a big team does require some effort. Furthermore, some of the auto bot reminders on the tasks can be confusing on answers already provided. Once a user gets comfortable with the work flow, then it becomes a non-issue. However, it can be an issue in the beginning.

Continuum GRC has been an integral part of our audit process - from the ease of communication to the organization of documents. Overall it has made the entire process easier and more efficient.

The user interface was intuitive when I started using Continuum GRC over two years ago. Since then, I've noticed multiple improvements around efficiency and ease of use, so I know the developers are active, and the product is evolving.

Initially, the product went through some growing pains like any new product does. Certain parts of the user interface were clunky and some of the functionality was lacking, but most of these issues were purely aesthetic - nothing that impacted productivity.

Continuum GRC helped was a big part of our initial FedRAMP and SOC 2 audits. Being able to keep files organized year to year is valuable and really streamlines the process of collecting data.

Some of the UI is not terribly intuitive. It's fine once you get the hang of it, but it would be nice to be a little more user-friendly.

The application was great at maintaining everything needed to do RMF (answering Controls, Artifacts, POAMs, etc) in one location for each project.

Being able to have all the Controls in one central location was a plus. Answering them, adding Artifacts, etc by Control families helped keep the focus of the questions. Integrating the assessment to our business was easy.

Did not like that you had to name the role on every CCI under each control. It should be done by the control and inherited to the CCIs below. Also, if you attach a document to a multiple controls, it copies that artifact that many times, as to have the same document multiple times making your Artifact larger than it actually should be.

Single pane view of multiple compliance status. Easy and quick navigations. Flagging of controls, provision to add Field notes, email notifications and follow-up.

We did face slowness sometime ago that was reported and has been taken care of immediately. After which its blazing fast.

Continuum GRC does a good job of allowing us to effectively manage our audits.

Easy to use to upload artifacts and track status.

Nothing comes to mind, we haven't had a negative experience.

Very easy to use.

Easy to use and provided detailed explanation

Sometimes lost the data after entering . IT should have Auto Save option after going to next question

Easy to use and comprehensive. Made sure we checked all the blocks, protected our networks, and performed exceptionally well on the audit.

No real cons, we were able to learn and use the product quickly and it is easy to reference and update.