Diligent One Platform vs. OneTrust Tech Risk & Compliance

We are very happy with the tool, especially the flexibility> it was very easy for us to start with audits which we already do and move to controls and Risks from there. Most other tools try to force a methodology on you. It is very well suited for companies that want to start somewhere and grow from there

Incentivized

OneTrust provides a repeatable and defined process for vendor assessments but should be adapted to your organization. OneTrust functions well for a centralized document repository. The pricing of modules and what modules are required for workflows to function fully should be better defined. Automated assessments can wind up in spam filters and should be communicated outside of the platform prior to sending to the vendor.

Incentivized

• Enhance business compliance by maintaining records and documents for all our processes and reports, which allows us to not worry about training new people in case resources are transferred.
• We integrated risk assessment tools and business continuity plans, which allowed proactive identification and mitigation of potential business risks.
• It helped to secure communication channels with confidential discussions and document sharing among team members and leadership.

Incentivized

• Module wise implementation.
• Very reasonable price structure.
• Easy and speedy to implement.
• Product roadmap.

• Improve the TPRM functionality
• Improve the functionality and features of Risk Manager to be more complete so that it covers the whole spread from ERM to individual risk assessments.
• Improve their overall UI/UX.
• Provide a lot more ready robots for customers to use for all the basic areas. For e.g. user access udit for source repos from different vendors, etc.

Incentivized

• Documentation chasing for assessments is not as automated or hands-off as demos made it seem.
• Getting custom risk matrix set up required professional onboarding.
• Platform is less than intuitive.
• Pricing is module dependent and demos do not highlight which module is included in which workflow.

Incentivized

HighBond by Galvanize support has some of the best and fastest support that I have experienced. Though we only contact them through emails, they were quick to provide insightful information about our problems. Whenever we email them about an issue, they would be able to reply in less than an hour, ready and prepared with useful solutions to address the issue.

Incentivized

We’re pretty satisfied with the implementation offering and the reading experiences provided. With our quarterly audits, this tool has made the task much more accessible. The outcome of version control of documents is easy to accomplish, and gathering all the records in one place makes it more accessible.

Incentivized

I'm excited about diligent due to the fact that they provide many tools to support compliance through use of analytics and testing processes. We also use FloQast, for which I'm an advocate for, however I'm not sure they have expanded yet to support analytics and testing. I don't have any further experience with other products

Incentivized

During the assessment, we found that OneTrust is easier to use, set up, and administer. it has a quick ROI and value for business. The OneTrust product support and roadmap are far more competitive in comparison to TrustArc. OneTrust is specialized in GRC including Data Privacy and Cookie compliance, where Archer is good in Enterprise Risk management.

• A lot of time and efficiency has been saved for my team as we continue to find different ways to automate tests, continuous monitoring projects, etc. We have been able to shift our focus on enhancement projects that previously had been on the back burner until we had switched to the Diligent One Platform.

Incentivized

• More uniform vendor assessments.
• Defensible numeric metrics reflecting risk.
• Centralized document repository for audit proofs.

Incentivized