Marketplace

BitSight provides security ratings which enable a dynamic measurement of an organization’s cybersecurity performance that is both material and validated. BitSight’s Security Ratings Platform continuously analyzes vast amounts of external data on security issues and behaviors in order to help organizations manage third-party risk, underwrite cyber insurance policies, benchmark performance, conduct M&A due diligence, and assess risk. MetricStream Third-Party Risk Management integrates with BitSight, to enable proactive identification and mitigation of cybersecurity risks in the extended enterprise.

Compliance.ai is transforming the way highly regulated organizations address compliance risk. Its Modern Regulatory Change Management (RCM) solution empowers banks, financial services and insurance companies to proactively manage the growing volume and velocity of regulatory changes as they occur and makes it simple to implement the correct steps to remain in compliance. Modern RCM by Compliance.ai delivers relevant content with personalized insights, obligation analysis and risk monitoring.

Cube is a global RegTech boasting the world’s most comprehensive source of classified, meaningful regulatory intelligence. Born of the 2008 financial crisis, Cube combines industry-leading technology and automation with expert-validated insights to enable global financial institutions to streamline their complex regulatory change management processes.

Using leading techniques in artificial intelligence, including machine learning and natural language processing, Cube captures and classifies all regulatory content across 180 countries in 60 languages and maps it to customers’ compliance frameworks, from financial crime to cyber, privacy, tech risk and more.

Dow Jones is an internationally renowned provider of exclusive insights, data sets and integrated technology solutions for managing regulatory and reputational risk. MetricStream Third-Party Risk Management integrates seamlessly with Dow Jones to support a comprehensive and intelligent process for onboarding, risk monitoring, conducting due diligence and tracking performance of third parties. The rich, real time, global data feeds enable organizations to improve risk oversight, make better risk-based decisions and strengthen governance, while automated assessments enable analysis and remediation measures.

Dun & Bradstreet’s D-U-N-S (Data Universal Numbering System) numbers are used to maintain up-to-date and timely information on more than 330 million global businesses. D-U-N-S numbers are often referenced by organizations to help predict the reliability and financial stability of third parties in the network. MetricStream Third-Party Risk Management integrates with Dun & Bradstreet to enrich the third party’s profile by enabling users to screen, on-board, and continuously monitor third parties based on insights on credit/financial risk.

LexisNexis Regulatory Compliance is a legal obligations register and alerting solution that combines regulatory content with technology to empower you to take control of your compliance obligations. We use domestic and international legal and industry experts to provide a practical, business language interpretation of all the relevant legislative and regulatory materials, so you don’t have to. Content is updated regularly, so you can access obligations which reflect the current legislative framework - saving you significant costs and / or research time. All content is supported with flexible technology options designed to meet your existing and future needs. LexisNexis Regulatory Compliance makes your compliance journey fast and seamless.

Qualys is a leading provider of cloud-based security solutions. The Qualys Vulnerability Management, Detection, and Response (VMDR) is integrated with MetricStream IT and Cyber Risk to provide your organization with a single robust system to automatically monitor and capture all asset and network vulnerabilities, and route them through a systematic process of investigation and remediation. The integrated solution enables a centralized and scalable framework to efficiently manage IT network, hardware, and cloud vulnerabilities across departments, business units, and locations.

SecurityScorecard is the global leader in cybersecurity ratings with millions of organizations continuously rated. SecurityScorecard non-intrusively collects data from across the internet for an objective, outside-in perspective on ten groups of risk factors, including DNS health, IP reputation, web application security, network security, leaked information, hacker chatter, endpoint security, and patching cadence. MetricStream Third-Party Risk Management integrates seamlessly with SecurityScorecard, and provides proactive and clear indicators on organizations security landscape.

The Standard Information Gathering (SIG) assessments of Shared Assessments holds high industry standards and incorporates best practices which help enterprises keep a watchful eye on emerging risks, as well as emerging regulations, guidelines, and standards for a wide range of industries. SIG integrated with MetricStream Third-Party Risk Management helps evaluate 18 risk control areas, or “domains” within a third-party’s environment including cybersecurity, IT, privacy, data security, and business resiliency within the extended enterprise.

Tenable.sc and Nessus Professional provides the most comprehensive vulnerability coverage with real-time continuous assessment of your network. It locates and identifies network devices, scans those systems to detect vulnerabilities, and provides detailed

Thomson Reuters Regulatory Intelligence provides a global coverage of 1,200+ regulatory bodies and 2,500+ collections of regulatory and legislative materials—making it one of the most trusted sources of regulatory intelligence. Integrated with MetricStream’s Regulatory Change Management product enables MetricStream’s customers to leverage Thomson Reuters regulatory content directly within their MetricStream solution to effectively assess the impact of the regulations on related policies, procedures, risks, and controls, and strengthen their regulatory compliance.

The Unified Compliance Framework®, the underlying framework for the Common Controls Hub (CCH), is the largest and the only industry-vetted compliance database that maps and harmonizes more than 16,000 IT control statements to more than 1,000 regulations, standards, and frameworks. The Common Controls Hub connects the various criteria, policies, and lexicons leveraging their multi-patented mapping processes and the Compliance Dictionary of over 600,000 terms. MetricStream has partnered with Network Frontiers to deliver the UCF Common Controls Hub’s (CCH) integration with the market-leading MetricStream IT Compliance Management product.