CyberCONCUR™ Assessment Module

Manage all audit, assurance and assessment in one place.

Multiple assessment functionality

• Manage the whole cyber security (or other internal control) gap assessment, compliance, control assurance or audit workpapers. No more point solutions with separate licencing.
• Record questionnaire observations, attestations, findings, DE and OE assessment, and maturity. Additional user-defined fields available. One tool for a simple gap assessment up to a Line 3 audit.
• Issue questionnaires to internal and external stakeholders via our free use external portal. No more worrying if you are licenced to conduct the required exercise.

Multi-framework assessments

• Use multiple included control frameworks, add your own policy or control frameworks, or request one to be added for free. No more worrying if the framework is included.
• Assess once across multiple frameworks. No more struggling with repetitive assessments or cutting and pasting between them.

Multi-scope, multi-period assessments

• Conduct control assessment at any scope (service, supplier, process, BU, enterprise) and aggregate up to different organisational levels. No more worrying subjective aggregation by Line 1 users.
• Record assessments by assessment period (with multiple variations per period – e.g. planned, option x, actual.
• You can now measure planned and actual control uplift as well as use baskets of uplifts in projected risk profiles or risk quantification exercises.

MyRISK® Chat enabled

• Use advanced AI to automatically assess effectiveness of a control based on corresponding questionnaire responses or observations (and validate by a user). Save time and go straight to the 2nd level reviewer.
• Automatically calculate a control maturity (based on CMMi) from a control observation (and validate by a user). No more subjective maturity assessments by different team members.
• Use advanced AI to identify similar controls between frameworks.
• Ask questions about the effectiveness of a questionnaire response or an observation, as well as the corresponding CMMi maturity level.
• MITRE simulation (threat actor support vector model and attack tree) to calculate FAIR vulnerability.
• More skills added every month.

Start small and grow

• Start with the MyGRC, CyberQandA and CyberCONCUR modules to conduct audit and assurance exercises.
• Use additional AI-enabled modules to integrate the cyber ecosystem, aggregate siloed data, automate control assurance processes, innovate, provide business insights, and quantify risk.

Confidently conduct multi-framework assessment, assurance and audit engagements without worrying about point solutions, complex licencing, tracking completion, or reconciling similar questions.

Module Technical Details

1 Application
1 Integration – MyGRC™ core module
Optional Integration – CyberQandA™ questionnaire module
1 AI Automation – integrated with MyRISK® Chat module

Module Dependencies

MyGRC™ core module

Module Status

General Availability
Free Tier available