Marketplace

BitSight provides security ratings which enable a dynamic measurement of an organization’s cybersecurity performance that is both material and validated. BitSight’s Security Ratings Platform continuously analyzes vast amounts of external data on security issues and behaviors in order to help organizations manage third-party risk, underwrite cyber insurance policies, benchmark performance, conduct M&A due diligence, and assess risk. MetricStream Third-Party Risk Management integrates with BitSight, to enable proactive identification and mitigation of cybersecurity risks in the extended enterprise.

Compliance.ai is transforming the way highly regulated organizations address compliance risk. Its Modern Regulatory Change Management (RCM) solution empowers banks, financial services and insurance companies to proactively manage the growing volume and velocity of regulatory changes as they occur and makes it simple to implement the correct steps to remain in compliance. Modern RCM by Compliance.ai delivers relevant content with personalized insights, obligation analysis and risk monitoring.

Cube is a global RegTech boasting the world’s most comprehensive source of classified, meaningful regulatory intelligence. Born of the 2008 financial crisis, Cube combines industry-leading technology and automation with expert-validated insights to enable global financial institutions to streamline their complex regulatory change management processes.

Using leading techniques in artificial intelligence, including machine learning and natural language processing, Cube captures and classifies all regulatory content across 180 countries in 60 languages and maps it to customers’ compliance frameworks, from financial crime to cyber, privacy, tech risk and more.

Dow Jones is an internationally renowned provider of exclusive insights, data sets and integrated technology solutions for managing regulatory and reputational risk. MetricStream Third-Party Risk Management integrates seamlessly with Dow Jones to support a comprehensive and intelligent process for onboarding, risk monitoring, conducting due diligence and tracking performance of third parties. The rich, real time, global data feeds enable organizations to improve risk oversight, make better risk-based decisions and strengthen governance, while automated assessments enable analysis and remediation measures.

Dun & Bradstreet’s D-U-N-S (Data Universal Numbering System) numbers are used to maintain up-to-date and timely information on more than 330 million global businesses. D-U-N-S numbers are often referenced by organizations to help predict the reliability and financial stability of third parties in the network. MetricStream Third-Party Risk Management integrates with Dun & Bradstreet to enrich the third party’s profile by enabling users to screen, on-board, and continuously monitor third parties based on insights on credit/financial risk.

Qualys is a leading provider of cloud-based security solutions. The Qualys Vulnerability Management, Detection, and Response (VMDR) is integrated with MetricStream IT and Cyber Risk to provide your organization with a single robust system to automatically monitor and capture all asset and network vulnerabilities, and route them through a systematic process of investigation and remediation. The integrated solution enables a centralized and scalable framework to efficiently manage IT network, hardware, and cloud vulnerabilities across departments, business units, and locations.

The Standard Information Gathering (SIG) assessments of Shared Assessments holds high industry standards and incorporates best practices which help enterprises keep a watchful eye on emerging risks, as well as emerging regulations, guidelines, and standards for a wide range of industries. SIG integrated with MetricStream Third-Party Risk Management helps evaluate 18 risk control areas, or “domains” within a third-party’s environment including cybersecurity, IT, privacy, data security, and business resiliency within the extended enterprise.

Thomson Reuters Regulatory Intelligence provides a global coverage of 1,200+ regulatory bodies and 2,500+ collections of regulatory and legislative materials—making it one of the most trusted sources of regulatory intelligence. Integrated with MetricStream’s Regulatory Change Management product enables MetricStream’s customers to leverage Thomson Reuters regulatory content directly within their MetricStream solution to effectively assess the impact of the regulations on related policies, procedures, risks, and controls, and strengthen their regulatory compliance.

The Unified Compliance Framework®, the underlying framework for the Common Controls Hub (CCH), is the largest and the only industry-vetted compliance database that maps and harmonizes more than 16,000 IT control statements to more than 1,000 regulations, standards, and frameworks. The Common Controls Hub connects the various criteria, policies, and lexicons leveraging their multi-patented mapping processes and the Compliance Dictionary of over 600,000 terms. MetricStream has partnered with Network Frontiers to deliver the UCF Common Controls Hub’s (CCH) integration with the market-leading MetricStream IT Compliance Management product.