Marketplace

BitSight provides security ratings which enable a dynamic measurement of an organization’s cybersecurity performance that is both material and validated. BitSight’s Security Ratings Platform continuously analyzes vast amounts of external data on security issues and behaviors in order to help organizations manage third-party risk, underwrite cyber insurance policies, benchmark performance, conduct M&A due diligence, and assess risk. MetricStream Third-Party Risk Management integrates with BitSight, to enable proactive identification and mitigation of cybersecurity risks in the extended enterprise.

Compliance.ai is transforming the way highly regulated organizations address compliance risk. Its Modern Regulatory Change Management (RCM) solution empowers banks, financial services and insurance companies to proactively manage the growing volume and velocity of regulatory changes as they occur and makes it simple to implement the correct steps to remain in compliance. Modern RCM by Compliance.ai delivers relevant content with personalized insights, obligation analysis and risk monitoring.

Cube is a global RegTech boasting the world’s most comprehensive source of classified, meaningful regulatory intelligence. Born of the 2008 financial crisis, Cube combines industry-leading technology and automation with expert-validated insights to enable global financial institutions to streamline their complex regulatory change management processes.

Using leading techniques in artificial intelligence, including machine learning and natural language processing, Cube captures and classifies all regulatory content across 180 countries in 60 languages and maps it to customers’ compliance frameworks, from financial crime to cyber, privacy, tech risk and more.

Dow Jones is internationally renowned as a provider of exclusive insights and data sets for financial firms, professionals, and investors. MetricStream Third-Party Risk Management integrates with Dow Jones to supports a comprehensive and intelligent process for onboarding, risk monitoring, conducting due diligence, and tracking performance of third parties. The rich, real time, global data feeds enable organizations improve risk oversight, make better risk-based decisions, and strengthen governance, while the automated assessments and issues enable analysis and remediation measures.

Dun & Bradstreet’s D-U-N-S (Data Universal Numbering System) numbers are used to maintain up-to-date and timely information on more than 330 million global businesses. D-U-N-S numbers are often referenced by organizations to help predict the reliability and financial stability of third parties in the network. MetricStream Third-Party Risk Management integrates with Dun & Bradstreet to enrich the third party’s profile by enabling users to screen, on-board, and continuously monitor third parties based on insights on credit/financial risk.

Qualys is a leading provider of cloud-based security solutions. The Qualys Vulnerability Management, Detection, and Response (VMDR) is integrated with MetricStream IT and Cyber Risk to provide your organization with a single robust system to automatically monitor and capture all asset and network vulnerabilities, and route them through a systematic process of investigation and remediation. The integrated solution enables a centralized and scalable framework to efficiently manage IT network, hardware, and cloud vulnerabilities across departments, business units, and locations.

SecurityScorecard is the global leader in cybersecurity ratings with millions of organizations continuously rated. SecurityScorecard non-intrusively collects data from across the internet for an objective, outside-in perspective on ten groups of risk factors, including DNS health, IP reputation, web application security, network security, leaked information, hacker chatter, endpoint security, and patching cadence. MetricStream Third-Party Risk Management integrates seamlessly with SecurityScorecard, and provides proactive and clear indicators on organizations security landscape.

The Standard Information Gathering (SIG) assessments of Shared Assessments holds high industry standards and incorporates best practices which help enterprises keep a watchful eye on emerging risks, as well as emerging regulations, guidelines, and standards for a wide range of industries. SIG integrated with MetricStream Third-Party Risk Management helps evaluate 18 risk control areas, or “domains” within a third-party’s environment including cybersecurity, IT, privacy, data security, and business resiliency within the extended enterprise.

Tenable.sc and Nessus Professional provides the most comprehensive vulnerability coverage with real-time continuous assessment of your network. It locates and identifies network devices, scans those systems to detect vulnerabilities, and provides detailed

Thomson Reuters Regulatory Intelligence provides a global coverage of 1,200+ regulatory bodies and 2,500+ collections of regulatory and legislative materials—making it one of the most trusted sources of regulatory intelligence. Integrated with MetricStream’s Regulatory Change Management product enables MetricStream’s customers to leverage Thomson Reuters regulatory content directly within their MetricStream solution to effectively assess the impact of the regulations on related policies, procedures, risks, and controls, and strengthen their regulatory compliance.

The Unified Compliance Framework®, the underlying framework for the Common Controls Hub (CCH), is the largest and the only industry-vetted compliance database that maps and harmonizes more than 9,300 IT control statements to more than 1,200 regulations, standards, and frameworks. The Common Controls Hub connects the various criteria, policies, and lexicons of over 200,000 individual compliance mandates across over 800 laws, standards, and regulations. MetricStream has partnered with Network Frontiers to deliver the UCF Common Controls Hub’s (CCH) integration with the market-leading MetricStream IT Compliance Management product.