Onspring Reviews & Pricing

Key Features

Governance, Risk & Compliance Suite

• Process Automation: Set up automated workflows for a range of procedures, including risk assessments, policy updates, control tests and more. 
• Risk Register: Connect risks, audits, controls and policies in a centrally accessible risk register for real-time insights. 
• Task Assignment: Assign tasks and risk ownership based on risk scores, urgency and prioritization for optimal risk mitigation. 
• Security: Create custom groups, roles and users for permission-based access to core processes. 
• Compliance: Cross-check the compliance of controls against relevant regulatory standards like SOX, GDPR and NERC. 
• Analytics: Run advanced analytics on internal and residual risks and generate visual reports by history and heat maps. 

IT Service Management Suite

• Risk Tracking: Get a consolidated view of assets, asset lifecycle workflows, workplace incidents, vulnerabilities, vendor contracts, regulations, policies, audits and risk registers. 
• Collaboration: Share impact ratings and financial implications of risk reports to risk management and information security teams in real time. 
• Incident Management: Leverage dynamic reporting to capture granular incident reports and assign ownership. Share reports via integrated email clients and send updates to linked parties. 
• Ticketing: Log and follow up on software development lifecycle (SDLC) tickets, QA plans and support tickets, and release notes to ensure nothing is left unresolved. 
• Reporting: Run built-in risk assessment reports for multiple categories like geography, business unit, software, regulation and networking system. 
• Analytics: Calculate depreciation costs, project investment costs and incident implications on critical processes. Get data-driven insights such as real-time risk indicators, hidden trends, performance metrics and contextual scenario breakdowns. 

Business Operations Suite

• Third-Party Risk: Provides one portal for everything related to third-party vendors – onboarding, risk assessments, reviews, renewals, approvals and contract negotiations. 
• Dispute Tracking: Track legal reviews for potentially damaging transactions, complaints, disputes and litigation and look for the best possible resolution for all parties. 
• Risk Evaluation: Evaluate legal events for urgency and automatically assign tasks to relevant teams. 
• Security: Control access with permissions based on roles, users and groups. 
• Reporting: Run reports on the financial and operational impact of vendors based on category, tier level, spend and location. Measure the potential fallout of ongoing litigation. 

Regulations and Frameworks

• Compliance: Stay compliant with several regulatory standards and frameworks such as CMMC, GDPR, HIPAA, ISO, HITRUST, NIST, PCI and ISO. 

Limitations

•  The platform’s UX and steep learning curve make it difficult to use at first. 
•  The API for integration with third-party apps is a bit dated. 
•  Role management lacks flexibility. 

Suite Support