SAI360 Reviews & Pricing

Key Features

• Compliance Management: Use built-in workflows to automate tasks, notifications and communications. Continuously assess the organization’s compliance status and keep a centralized record of information. Run reports directly from a dashboard to remediate gaps and be audit-ready. 
  • Flexibility: Customize compliance forms and processes to meet requirements and secure information with personalized granular authorization levels. Allow external parties to perform audits in the Virtual Evidence Room. 
• IT Risk: Get complete visibility into IT systems with external data feeds, incidents, risk assessments and vulnerability scanning tools. Set up automated workflows and track the entire process in real time, from threat detection to mitigation. 
  • IT Compliance: Automatically check IT compliance with requirements pre-mapped to common risk and control frameworks, including ITIL, ISO 27001, ISO 31000, COBIT and PCI. Train employees on cybersecurity, data protection, data privacy and information security regulations. 
  • Policies: Store all policies in a centralized policy library with custom fields and search capabilities. Automatically review policies from time to time to identify expired and ineffective policies. 
• Environment, Health, Safety & Sustainability: Track incidents, accidents, inspections, audits and hazards with various data-capture tools such as geo-location tracking, text-to-speech and photo attachments. Search for information with document search and get automated notifications on important events. 
  • EHS&S Services: Provide the best environment, health, safety and sustainability services with 20+ purpose-built modules. Customize existing programs, automatically assign tasks, and generate notifications, escalations and reminders. 
  • Insights: Generate accurate reports on the company’s performance metrics, including data visualizations, lagging indicators, trend spotting and more. 
• Operational Risk: Leverage dynamic risk indicators to continuously monitor risks. Store risk data and action plans in a risk register. Prepare trigger-based workflows and risk consolidation techniques to accurately assess and treat enterprise and operational risks. 
  • Reporting: Create custom reports and dashboards to track risk meetings, risk dimensions, and impact and likelihood scales. Measure risk against global frameworks like COSO, COBIT and ISO.  
• Audit Management: Securely access and edit all audit information from a centralized database. Manage audit procedures with automated workflows and a transparent audit trail. Customize built-in audit templates to create work papers. 
  • Coverage: Identify risk-prone areas with risk-based scoping capabilities and distribute audit resources based on vulnerability levels. Streamline audit planning and train employees on audit regulations and industry best practices. 
  • Insights: Analyze exported data for greater insights into the organization’s audit status. One-click reports allow appropriate personnel to approve, review and track audit progress in real time. 
• Business Continuity: Prepare and execute business continuity plans in a crisis or disaster. Automatically assign tasks to relevant personnel and track plan progress. Eliminate information silos by creating a hierarchical map connecting critical processes and assets to internal controls. Establish a common risk language across the organization. 
  • Reports: Run reports with customizable fields, forms and authorizations. Collect information with intuitive forms and improve efficiency with workflows. 
• Data Privacy: Keep a record of data privacy regulations and personal and vendor data in a centralized database. Prepare workflows to manage data requests, policies and response measures. 
  • Documentation and Reporting: Automatically create records of data breaches and respond quickly with incident response workflows. Maintain breach data audit trails for complete transparency and run built-in reports for additional insights. 
• Third-Party Risk: Designate a single source of truth for vendor records, including risk profiles, scoring data, assets, geographical location and more. Access pre-mapped control frameworks and regulations to identify high-priority vendors. Provides configurable forms and questionnaires to assign risk profiles to vendors. Screen all associated third parties for exposure to financial, cyber and operational risks through WorldCheck, Argos Risk and SecurityScorecard. 
  • Contract Management: Store and manage all third-party contracts from a central repository. Use automated workflows to review and approve vendor contracts and get reminders for important dates and tasks. 
• Regulatory Change: Track regulatory requirements with access to structured regulatory content, evidentiary documentation and regular updates. Assign assessment tasks to relevant personnel and use the dashboard for a consolidated view of regulatory changes. 
• Internal Control & SOX Compliance: Create policies and train employees on SOX compliance. Export 404 and 302 certifications with ease. 
• Security: Provides 24/7 security to data centers located in ISO 27001 certified colocation centers. Data encryption and multi-tiered firewall protection protect consumer data both during transit and at rest. Prevent unauthorized access with Single Sign-On via SAML 2.0 or Shibboleth protocols and password protection using SHA 256 hashing algorithm. 

Limitations

•  The customization process is complicated. 
•  The training module’s translation feature can misinterpret on occasion. 
•  The reporting feature has a steep learning curve. 

Suite Support