MyGRC™ Cyber Risk

Understand and manage cyber risks.

Organisational GRC

• Record organisational business unit structures, and related critical business processes, or easily import from your ERP systems.
• Manage third party and fourth party structures. Aggregate cyber security (or other risk to the service, supplier, process, BU, or enterprise level. No more lack of supply chain visibility.

Supplier GRC

• A unique feature missing in other platforms.
• Manage all the supplier records including ownership, contract details, geographic coverage, references, support capability, external intelligence, financials, insurance cover, business criticality, and risk.
• Segment suppliers using criteria such as strategic value, revenue and risk. Record external cyber security score data.
• Import or export to a Vendor Relationship Management system or use instead of one.

IT Service GRC

• Record technical details such as data type. hosting arrangements, and service ownership. Import or export to a CMDB system.
• Record service cyber security risk meta-data – RTO, RPO, data classification, and CIA ratings.
• Record IT Assets as a high-level MITRE platform architecture, for ML/AI simulations.
• Cater for multiple levels of IT Service, component, or capability.
• Identify critical systems based on resilience and data risk, and hand pick the crown jewels.
• Add custom fields and attach ITSM documentation or cyber security risk and control evidence.

Full cyber risk functionality

• Manage the whole cyber security risk (or other risk) management process including action management, out of the box.
• Measure cyber risk at enterprise, supplier, business unit, critical process, or IT service levels.
• Record cyber security risks and issues (or any enterprise or IT risks and issues) using a good practice risk register.
• Maintain cyber security risk (or other risk) actions and see the full update history.

MyRISK Chat enabled

• Chat with an authoritative collection of risk and control reference materials. No more searching for the best source of expertise.
• Ask questions about the controls required to mitigate a risk and the objectives of the controls. No more guessing how to develop a risk treatment action.
• Ask how to prioritise risk treatment actions and obtain a recommendation (for human review) of the order in which to perform actions for a given cyber risk. Save time with periodic reviews of your risk registers.
• More skills added every month

Start small and grow

• Start with the free tier (limited to 20 IT Services) as a proof of concept. No more complex planning and consulting engagements to start with GRC.
• Get help if your need it with our MyRISK® Academy training, or CyberBLUE® advisory team members and partners.
• Part of our composable GRC solution.
• Subscribe to get the full MyGRC™ module capability and start to test out the trial versions of other modules (enabled out of the box).
• Schedule a call to discuss how HyperGRC® can be configured to solve your next challenge.
• Use our full set of AI-enabled modules to integrate the cyber ecosystem, aggregate siloed data, automate processes, innovate, provide business insights, and quantify risk.

Confidently understand and communicate your cyber security risk and control environment without worrying about gaps in knowledge or lack of expertise.

Module Technical Details

1 Application
Trial Versions of all modules
Optional Integrations – all modules
1 AI Automation (MyRISK® Chat)

Module Dependencies

None (Core Module)

Module Status

General Availability
Free Tier available