SIMPLIFYING GRC
SIMPLE. EFFECTIVE. AFFORDABLE.
WHAT IS SIMPLERISK?
SimpleRisk is an enterprise grade platform designed for any size organization that can be used to meet all of your
Governance, Risk Management, and Compliance requirements. It boasts functionality that is comprehensive
enough to be deployed by some of the largest enterprises in the world yet presents a user interface so simple and
intuitive it can be used by the least technical people in your organization and is a fraction of the cost of traditional
GRC tools.
“The problem with many GRC tools is that they overreach their mission and become incredibly complex. So
complex that they require dedicated resources to manage them. SimpleRisk gives you exactly what you need
without all that overhead. And the best part is you can download it and get started for free!”
Allan Alford, CISO
KEY BENEFITS
• Deploy Rapidly – From “Zero to GRC” in a matter of minutes – no professional services required.
• Customizable – Configure SimpleRisk to match your internal processes and workflows to maximize efficiencies.
• Dynamic Reporting – Filter data to produce custom reports geared to C-Level, Technical, or Business stakeholders.
WHAT MAKES SIMPLERISK UNIQUE?
• It’s Simple – Designed so that anyone can use the system, promoting wide adoption.
• It’s Effective – Makes it easy to prioritize remediation efforts throughout the risk mitigation life cycle.
• It’s Affordable – SimpleRisk is more cost-effective by orders of magnitude than other GRC tools.
PRICING AND DEPLOYMENT MODELS
• A free and open source product called SimpleRisk Core
• Annual subscription fees that include support and software updates
• Unlimited users, unlimited risks
• On-Prem or Hosted deployment models
• A la Carte Extras that can be purchased separately
• Packaged bundles with built-in discounts
www.simplerisk.com SimpleRisk Datasheet November 2021
WHAT IS SIMPLERISK CORE?
SimpleRisk Core, our free and open source product introduced in 2013, makes using spreadsheets to perform risk
management manually a thing of the past. It can be downloaded for free from our website, installed in minutes, and
provides all the capabilities needed when first launching your GRC program.
WHAT IS SIMPLERISK ON-PREMISE?
SimpleRisk On-Premise enables you to run our award-winning SimpleRisk software on your servers inside of your
own datacenter environment. Simply download and install our free and open source SimpleRisk Core software and
you’re able to:
• Leverage your own internal security controls with the platform.
• Maintain all monitoring, backups, and upgrades.
• License SimpleRisk Extras to extend functionality beyond the free version of SimpleRisk Core.
WHY CHOOSE SIMPLERISK HOSTED?
SimpleRisk Hosted removes the administrative burden of On-Premise deployments and packaged bundles are
available to meet your GRC requirements. SimpleRisk Hosted:
• Eliminates the need for ongoing administration to perform backups, upgrades, and monitoring.
• Prevents interruptions to processes when there is staff turnover, unexpected sick leave, or vacations.
• Allows you to focus your key resources on the end game, which is managing your GRC program.
WHAT ARE THE SIMPLERISK EXTRAS?
Below is a list of the available Extras.
• API: Interact with other applications for advanced automation and leverage existing infrastructure.
• Advanced Search: Targeted searches for users to enter free form text and/or numeric data.
• ComplianceForge SCF: Select from 177 different frameworks mapped to 1,000 common controls.
• Custom Authentication: Supports Active Directory and SAML Authentication, and Duo Security.
• Customization: Change field names to match internal naming conventions and workflows.
• Email Notification: Used to notify all key stakeholders automatically with risk status changes.
• Encrypted Database: Encrypt sensitive text prior to being inserted into the SimpleRisk database.
• Import-Export: Allows users to import risk data and assets from or to a CSV file.
• Incident Management: Based on the NIST 800-61 Computer Security Incident Handling Guide.
• Jira Integration: Two-way synchronization of risk, mitigation, and review data.
• Organizational Hierarchy: Define multiple Business Units and include any number of teams.
• Risk Assessment: Allows you to perform customizable internal and external risk assessments.
• Team-Based Separation: Restricts access to risk information by discrete teams.
• Unified Compliance Framework: Import selected frameworks and control mappings directly from UCF.
• Upgrade: Provides a button to backup the SimpleRisk database and handle upgrades.
• Vulnerability Management: Integrate your SimpleRisk instance with Tenable.io or Rapid7 Nexpose/InsightVM.
We invite you to visit SimpleRisk at https://www.simplerisk.com/try to register for a free, 30-day hosted trial and
check out SimpleRisk firsthand. Or, to learn more, feel free to schedule a demo with us via our online calendar here.
www.simplerisk.com SimpleRisk Datasheet November 2021
