Try CyberGRX for FREE Today!

Identify Vulnerabilities In Your Third Party Ecosystem Instantly

Always know which third parties pose the most risk to your enterprise. Spot data risk sooner, respond to threats from third parties faster and avoid lost revenue.

Why CyberGRX

FAQ

(877) 929 - 2374

How CyberGRX Works

Runtime : 90 seconds

You're in
Good Company:

Why Adopt The CyberGRX Approach?

We can help you identify which third parties and vendors you should focus on, before you even conduct an in-depth assessment.

Identify Risks

Identify the most critical areas of risk and apply advanced analytics to generate risk-based insights

Reduce Cost

The CyberGRX Exchange significantly reduces costs by eliminating waste in today's third-party programs

Scale Your Ecosystem

Complete one digital CyberGRX assessment and use the CyberGRX Exchange to share with your ecosystem

Advanced Analytics

Advanced analytics provides you with actionable mitigation insights across your portfolio

The market’s first cyber global risk exchange

Load your vendors into the CyberGRX Exchange and quickly see the likelihood and potential impact of third-party cyber events across your portfolio to determine the appropriate level of assessment.

FREE TRIAL

CyberGRX is a force multiplier for our third-party cyber risk management program. In just the first year we will be able to assess 5x more vendors than we assessed last year and reallocate the resources saved to true risk management and mitigation efforts.

The support and ongoing collaboration we’ve received from CyberGRX and their customer success team has been extremely responsive and helpful. It has truly changed the way we assess vendors and manage third-party risks.

ADAM FLETCHER

CISO of Blackstone

Director of Enterprise Risk Management at Pinnacol

KELLY LUTINSKI

Frequently Asked Questions

How much does this cost?

How long does it take to complete an assessment?

If I post my asssessment to the exchange, will anyone be able to see my data?

How are the assessments updated to reflect new regulations and standards?

For the ordering customers, there are two elements to the cost model: an annual platform access fee and a per-assessment fee that varies according to tier of service. Platform access fees are paid annually; funds put into your CyberGRX account to cover assessment fees are evergreen. Once an assessment is ordered and delivered, customers receive access to that assessment and updates for a 12-month period.

Average timeframes to complete an assessment are as follows: ~75 days for Tier 1, ~28 days for Tier 2, ~35 days for Tier 2 Validated, and ~15 days for Tier 3. Our customer success team does an outstanding job helping third parties complete their assessments in a timely manner with training, support and coaching. That being said, average timeframes can vary depending on the unique situation.

No. You are in control of your data. Once you have completed an assessment, that data will only be shared on an individual basis, pending your approval for each case. If you never want to share your assessment, no one will see your assessment results. However, we do let exchange customers know of the presence of an assessment in the exchange for your organization. This facilitates the ordering process by letting them know that an assessment is available.

We are continuously evaluating new regulations and best practices as they are announced to address any control gaps and ensure adequate coverage over relevant risks. These are incorporated as part of our periodic content change management process.

Try CyberGRX for FREE Today!

Identify the risks that matter

Whether you are an enterprise, a third-party or both, the CyberGRX Exchange streamlines your third-party program by providing risk assessments as a service on top of an end-to-end third party analytics platform.

FREE TRIAL

© 2021 CyberGRX 

Privacy Policy | Terms & Conditions.

© 2018 CyberGRX 

Privacy Policy | Terms & Conditions.

63%

17%

of data breaches are linked to a third party

have confidence in third-party security program

Always know which third parties pose the most risk to your enterprise. Spot data risk sooner, respond to threats from third parties faster and avoid lost revenue.