“It’s important for us to monitor our vulnerabilities and security ratings because our insurers expect us to effectively protect and secure their data.”

"This multinational provides a wide range of financial services. UpGuard helps prevent data breaches, by continuously scanning their own, as well as third-party vendors helps de-risk their exposure to suppliers and enables them to be proactive in managing third-party vendor risk."

"Thanks to UpGuard, 640 hours of manual testing were reduced to 30 minutes, getting the datacenter operational on time."

"Our complicated environment requires attention to detail when reviewing security risks. We have many cloud-first vendors so the UpGuard platform allows us to be granular and gives us an interesting layered insight on our supply chain that could have a critical impact on our operation. As a telecommunications company providing …

“Before using UpGuard, our cyber risk management processes were very immature and still developing. Even after we started using UpGuard, we weren’t leveraging the tools the best we could.”

"Before UpGuard, conducting proper research for each vendor would eat up a lot of time – Does it comply with our requirements? Where is their data located? Do they have privacy policies."

"UpGuard provides an outsider's view of how an organization is doing in terms of vendor risk with the ever-increasing susceptibility of a cyberattack."

“In terms of pure security improvement across our company, we now complete hundreds of maintenance tickets, which is a massive advancement we couldn’t have achieved without UpGuard. We previously wouldn’t have detected at least 10% of those tickets, so UpGuard has enabled us to work faster by detecting issues quickly …

"Our vendor security risk assessments are now a well-oiled machine from where we started using UpGuard."

“If you’re familiar with Active Directory Group Policy, then UpGuard makes a lot of sense. Ultimately you have this environment and you have this policy you’re applying to it. We’re also using Octopus Deploy and UpGuard uses many of the same methodologies. The two products complement each other.“

“If they had a potential accounting impact, then we would insist on a SOC 1, Type 2 or SOC 2, Type 2. If they did not have an accounting impact, we had a phone call or sent a questionnaire.”

“I take a deep dive into the technical features to help the vendor when I send a remediation request.”

“I look at the newsfeed to see if any companies we do business with have had a cybersecurity incident.”

"We now have an automated, robust process for validating that planned changes are made correctly. That reduces regulatory and operational risk, lowers costs, and allows us to drive continuous improvement."

"We can now get comprehensive vulnerability reports, tied directly to specific CIs. Because of this, we’ll also be able to drive end-to-end remediation processes within ServiceNow, and tie this directly back into other areas such as GRC.”