Vendors › GRC / Risk & Compliance › Riskonnect
Riskonnect
Riskonnect
Founded 2007·US·PE-backed
4.5
Combined score
G2
4.4100Gartner
4.5120G2
4.4100 reviews
Gartner
4.5120 reviews
Gartner MQ: Leader (Gartner GRC MQ 2024)
GRC / Risk & Compliance assessment
PROTECTIONStrong
OPERATIONSStrong
ANALYTICSStrong
TRUST & ECOSYSTEMStrong
Strongest: Risk management
Watch out for: Framework coverage
Strengths & limitations
Strengths
●Strong enterprise risk management (ERM) - connects InfoSec risk to operational and business risk
●Good insurance risk management module - unique in GRC category
●Acquired Niku ERM (2023) - broader risk management capabilities
Watch out for
●Less automation for cloud compliance evidence collection than Vanta or Drata
●Implementation complexity similar to ServiceNow
●Less brand recognition than ServiceNow or AuditBoard in enterprise evaluations
Best for
Enterprises wanting to connect cybersecurity risk with broader enterprise risk management and insurance programs.
Not suitable for: Organisations focused on IT compliance automation - Vanta and Drata are more efficient for cloud-native compliance.
Compliance coverage
●SOC 2
●HIPAA
●NIST CSF
●PCI-DSS
●CMMC
●GDPR
●NIS2
●DORA
●ISO 27001
○Essential Eight
○AU Privacy Act
○CIS Benchmarks
Switching intelligence
Switching from
Common migration paths based on review data
- Spreadsheet risk management
- RSA Archer (modernisation)