Published: 14 September 2021
Summary
Security and risk management leaders utilize IT risk management products to manage and automate IT compliance, assess the organization’s cyber and IT risk posture and inform business decisions. This research evaluates 14 vendors’ ITRM product capabilities to support key customer use cases.
Included in Full Research
Strategic Planning Assumptions
- Allgress
- Archer
- Diligent
- IBM
- LogicManager
- MetricStream
- NAVEX Global
- OneTrust
- Reciprocity
- Riskonnect
- SAI360
- ServiceNow
- SureCloud
- TechDemocracy
- Risk Analysis
- Risk Treatment Life Cycle
- Near-Real-Time IT Risk Profiling
- Board/Senior Executive Reporting
- Regulatory Content Management
- US Federal Compliance Requirements
- Data Integrations and Connectors
- Incident Management Integrations
- Threat and Vuln Mgmt Integrations
- Info and Asset Discovery/Inventory
- Workflow Management
- User Experience (UX)
- User Access
- IT Risk and Control Assessment
- Regulatory, Industry and Policy Compliance
- US Federal Assessment and Authorization
- Cyber Risk Management
- Integration With Enterprise Risk Management
Gartner Recommended Reading
Critical Capabilities Methodology