Marketplace

BitSight provides security ratings which enable a dynamic measurement of an organization’s cybersecurity performance that is both material and validated. BitSight’s Security Ratings Platform continuously analyzes vast amounts of external data on security issues and behaviors in order to help organizations manage third-party risk, underwrite cyber insurance policies, benchmark performance, conduct M&A due diligence, and assess risk. MetricStream Third-Party Risk Management integrates with BitSight, to enable proactive identification and mitigation of cybersecurity risks in the extended enterprise.

With the BMC and MetricStream integration, customers can efficiently manage their IP based assets and report incidents in BMC. MetricStream integrates with BMC Atrium Configuration Management Database (CMDB) and BMC Remedy Incident Management (IM) to identify asset-related issues (via remediation rules) and reports them back for further action. This integration helps organizations easily and effectively manage IT assets and incidents. The solutions equips CISOs and security teams to eliminate manual approach, structure and accelerate workflows and processes in these areas, and significantly enhance efficiency.

Cube is a global RegTech boasting the world’s most comprehensive source of classified, meaningful regulatory intelligence. Born of the 2008 financial crisis, Cube combines industry-leading technology and automation with expert-validated insights to enable global financial institutions to streamline their complex regulatory change management processes.

Using leading techniques in artificial intelligence, including machine learning and natural language processing, Cube captures and classifies all regulatory content across 180 countries in 60 languages and maps it to customers’ compliance frameworks, from financial crime to cyber, privacy, tech risk and more.

Dow Jones is an internationally renowned provider of exclusive insights, data sets and integrated technology solutions for managing regulatory and reputational risk. MetricStream Third-Party Risk Management integrates seamlessly with Dow Jones to support a comprehensive and intelligent process for onboarding, risk monitoring, conducting due diligence and tracking performance of third parties. The rich, real time, global data feeds enable organizations to improve risk oversight, make better risk-based decisions and strengthen governance, while automated assessments enable analysis and remediation measures.

Dun & Bradstreet’s D-U-N-S (Data Universal Numbering System) numbers are used to maintain up-to-date and timely information on more than 330 million global businesses. D-U-N-S numbers are often referenced by organizations to help predict the reliability and financial stability of third parties in the network. MetricStream Third-Party Risk Management integrates with Dun & Bradstreet to enrich the third party’s profile by enabling users to screen, on-board, and continuously monitor third parties based on insights on credit/financial risk.

Jira is a widely used ticketing and IT service management tool used by IT teams to manage their day-to-day work activities. MetricStream’s Evidence Management offering is integrated with Jira to provide your organization with a central repository of all evidence requests, providing better visibility and easy access.

Qualys is a leading provider of cloud-based security solutions. The Qualys Vulnerability Management, Detection, and Response (VMDR) is integrated with MetricStream IT and Cyber Risk to provide your organization with a single robust system to automatically monitor and capture all asset and network vulnerabilities, and route them through a systematic process of investigation and remediation. The integrated solution enables a centralized and scalable framework to efficiently manage IT network, hardware, and cloud vulnerabilities across departments, business units, and locations.

ServiceNow is a leading cloud computing platform to help companies manage digital workflows for enterprise operations. MetricStream’s CyberGRC product suite integrates with ServiceNow’s Configuration Management Database (CMDB) and Incident Management (IM) modules to offer organizations better data connectivity and interconnectivity. This eliminates manual approaches and accelerates workflows and processes to enhance efficiency.

The Standard Information Gathering (SIG) assessments of Shared Assessments holds high industry standards and incorporates best practices which help enterprises keep a watchful eye on emerging risks, as well as emerging regulations, guidelines, and standards for a wide range of industries. SIG integrated with MetricStream Third-Party Risk Management helps evaluate 18 risk control areas, or “domains” within a third-party’s environment including cybersecurity, IT, privacy, data security, and business resiliency within the extended enterprise.

Tenable.sc and Nessus Professional provides the most comprehensive vulnerability coverage with real-time continuous assessment of your network. It locates and identifies network devices, scans those systems to detect vulnerabilities, and provides detailed report on the vulnerabilities affecting business-critical assets, map security issues to business applications, and aggregate and rollup risk information across the enterprise for proactive mitigation.

The Unified Compliance Framework®, the underlying framework for the Common Controls Hub (CCH), is the largest and the only industry-vetted compliance database that maps and harmonizes more than 16,000 IT control statements to more than 1,000 regulations, standards, and frameworks. The Common Controls Hub connects the various criteria, policies, and lexicons leveraging their multi-patented mapping processes and the Compliance Dictionary of over 600,000 terms. MetricStream has partnered with Network Frontiers to deliver the UCF Common Controls Hub’s (CCH) integration with the market-leading MetricStream IT Compliance Management product.