“I look at the newsfeed to see if any companies we do business with have had a cybersecurity incident.”

"UpGuard provides me an overview of the security across all the schools and helps me fix these security issues."

“Our previous vendor assessment process required a significant amount of time and also lacked the capability to identify specific types of risks that may be present across our supply chain.”

"It becomes easy to monitor hundreds of vendors on the UpGuard platform with instant email notifications if the vendor’s score drops below the threshold set based on risk or business."

"Before UpGuard, our vendor risk management activities were less effective and comprehensive, even began after a vendor was onboarded. Now it's easy to monitor them via the dashboard, and it starts before they even sign the agreement."

"We now have an automated, robust process for validating that planned changes are made correctly. That reduces regulatory and operational risk, lowers costs, and allows us to drive continuous improvement."

"We can now get comprehensive vulnerability reports, tied directly to specific CIs. Because of this, we’ll also be able to drive end-to-end remediation processes within ServiceNow, and tie this directly back into other areas such as GRC.”

“If they had a potential accounting impact, then we would insist on a SOC 1, Type 2 or SOC 2, Type 2. If they did not have an accounting impact, we had a phone call or sent a questionnaire.”

“I take a deep dive into the technical features to help the vendor when I send a remediation request.”

“If you’re familiar with Active Directory Group Policy, then UpGuard makes a lot of sense. Ultimately you have this environment and you have this policy you’re applying to it. We’re also using Octopus Deploy and UpGuard uses many of the same methodologies. The two products complement each other.“

“We check the dashboard daily. Our score reflects how well we are doing. The higher the score, the more confident we are in our security posture.”

"Our complicated environment requires attention to detail when reviewing security risks. We have many cloud-first vendors so the UpGuard platform allows us to be granular and gives us an interesting layered insight on our supply chain that could have a critical impact on our operation. As a telecommunications company providing …

"We did a group diff with UpGuard and quickly discovered that one of our web servers had a different configuration from the other six supporting the application. We restored that server’s configuration and things were back to normal. We couldn’t have done that without UpGuard.”

"By automating cyber risk detection and assessment, UpGuard has helped increase our cybersecurity performance, while getting efficiency through automation."

"Thanks to UpGuard, 640 hours of manual testing were reduced to 30 minutes, getting the datacenter operational on time."