Structured response to work in for responding to an assessment.

A lot of documentation verification requests.

My experience with CyberGRX was positive overall and I think this can be an important assessment tool for an organization when used in conjunction with a technical requirements questionnaire.

I initially used CyberGRX earlier in 2019 as part of a security assessment request from one of our clients and now my organization uses CyberGRX to do some of our own assessments. Cyber GRX was easy to use and understand. I liked that the multiple-choice format was easier to complete than an opened ended comment form. The questions are consistent and I would definitely say that it is thorough and covers all aspects of a security function.

The CyberGRX questionnaire was VERY long. While an organization with a mature security program will often have many individuals with specific roles and responsibilities I think the questionnaire could combine some of the questions which seem to get redundant. The questionnaire asks about education and experience for the personnel responsible for each aspect of security and therefore there are many similar questions.

Very detailed reporting, easy to log on and create users

Takes too long to go through all the questions. If you are a small company a lot of what is asked is not appropriate. If you say yes to a section then when you get into it you should have said no, there is no way to go back and change the answer. Very long winded with not enough explanation on the sections being completed.

Overall CyberGRX was extremely professional and very attentive to detail, deadlines, etc. They communicated very effectively and respectfully and were genuinely interested in helping our teams succeed. They were a little hobbled in my opinion by the quality of the tools they were forced to use, but as staff and company, were exceptional.

It was very professional. The high level overview of the categories and graphs provided a good outline of the overall objectives. They were repeated a lot, but did add some value.

The structure of the questions and explanations were non-intuitive and didn't provide enough detail to correctly understand what was being asked in order to provide a satisfactory response. There was no overview of the process that warned about being prevented from retracing previous answers to adjust once further questions helped illuminate the previous ones that were confusing. It was a one-way process and if it was possible to redo anything, there was no apparent way to do this. These elements of the software were extremely frustrating.

I wouldn't recommend this product as an audit solution due to the recent experience with your Assessment Coordinator

Last year's answers are self populating, you only have to change or confirm no change to the selected status.

Overly aggressive Assessment Coordinator. You should never contact a mutual client and relay derogatory comments about response time.