Press Release
Agiliance Launches OpenGRC™ Industry Community
Fifteen Service Providers and Technology Providers Join as Charter Members
San Jose, Calif. – June 21, 2010 – Agiliance, Inc., the leading independent provider of Governance, Risk and Compliance (GRC) solutions, today announced the launch of the OpenGRC Industry Community. OpenGRC by Agiliance is a consortium of service, technology, and content providers that give end user organizations automated yet cost-effective solutions to their ever-increasing risk, compliance and security challenges. OpenGRC charter members include four service and 11 technology providers who link expertise and products to the Agiliance RiskVision OpenGRC platform and applications.
Public and private sector organizations have long suffered from a myriad of business risks and complex regulations leading to major losses and audit fatigue. They rely on internal tools embedded in spreadsheets that cannot scale and external risk assessments yielding discreet documents. Some spend millions on first generation GRC solutions that create vendor lock-in via endless services customizations, providing little more than workflow and reporting on top of existing spreadsheets.
OpenGRC Community members see a customer mandate for cloud and in-house solutions that offer continuous compliance visibility, what-if risk modeling and analysis, and near real-time monitoring and remediation. Since customers also demand open platforms and domain services that enable self-sufficiency, the OpenGRC Community mission offers automation from data-to-dashboard systems, efficiency from out-of-the-box integration, and expertise from embedded knowledge.
Figure 1: OpenGRC by Agiliance. A GRC industry consortium of leading providers.
Agiliance works with 10 leading service providers. Accuvant, Bell Canada Services, Cisco Security Services and DRS Technologies are four OpenGRC charter members offering their services on the Agiliance RiskVision platform. Their expertise ranges from privacy impact management to PCI DSS compliance to security risk assessments to situational awareness programs, among others. Solutions delivered for the Public Health Agency of Canada, the British Columbia Government and US Navy SPAWAR project encapsulate these advisory and system integration partners' industry best practices and benchmarks in the areas of privacy, risk and security management.
"Our customers view Accuvant Risk & Compliance Management Services as their trusted advisor on security and compliance risks, and in turn we want to deliver offerings that generate immediate value," said Doug Landoll, practice director of risk and compliance management, Accuvant. "OpenGRC by Agiliance enables us to unite with best of breed technologies to recommend and deliver solutions that solve their risk pain, are ready-to-scale and easy-to-own."
In addition, 28 leading technology providers partner with Agiliance on out-of-the-box integrations to their market leading solutions. Eleven are OpenGRC charter members - McAfee, nCircle, NetIQ, Imperva, Application Security, eEye Digital Security, RedSeal, Rapid7, Skybox Security, Qualys and Verisign. The OpenGRC Community simply formalizes technology pairings on the Agiliance RiskVision platform already delivered at organizations such as Safeway, Advance Auto Parts, Highmark, Kaiser Permanente, US Health & Human Services, bwin International and the RSA Group. Billions of control checks for IT, operational and security risk are run across many millions of assets, data and people processes managed by these RiskVision environments.
"Global 2000 organizations and public sector agencies have implemented a variety of security, risk, and compliance technologies. These customers are thirsty for interoperability among the technologies they have invested in," said George Kurtz, EVP and chief technology officer at McAfee. "OpenGRC by Agiliance enables providers to collaborate and deliver more value to customers, a program that is very well aligned with McAfee's own Security Innovation Alliance (SIA) approach."
OpenGRC by Agiliance also supports mainstream content providers to ensure customers and partners have access to industry best frameworks and controls mapping. Solutions can leverage general purpose frameworks and content from organizations such as ISO, NIST, ISACA, COSO, SANS, UCF, and ISF, or industry specific content such as HITRUST, BITS, and NERC.
"Legacy, first generation GRC offerings have been scrutinized by leading industry analysts for their inability to deploy quickly and scale. OpenGRC by Agiliance embodies advances of second generation GRC solutions that automate regulatory or industry compliance and expand seamlessly to cost-effective, actionable, real-time organizational risk solutions," said Babak Salimi, vice president of business development at Agiliance. "The newly formed OpenGRC Community is based upon numerous, successful customer engagements and is steeped in best practices, content and technologies that integrate top down risk-centric and bottom up IT-centric approaches. OpenGRC is the new industry mandate."
About OpenGRC™ by Agiliance
Please visit http://www.agiliance.com/partners/ for a blog and FAQ on OpenGRC by Agiliance and for more information on the Agiliance Partner Community.
About Agiliance RiskVision
Agiliance RiskVision is an integrated, purpose-built GRC platform that offers an agile, modular approach to managing enterprise risk. RiskVision is comprised of six key GRC applications including: Compliance Manager, Enterprise Risk Manager, Vendor Risk Manager, Policy Manager, Threat and Vulnerability Manager and Incident Manager. Organizations can start with a single application and configure or deploy additional applications as needed. By leveraging the power of RiskVision, organizations are quickly gaining value from Governance, Risk and Compliance efforts with effective investment decisions, visibility into current and future risk, fewer audit failures and improved use of resources. For more information, please visit http://www.agiliance.com/products/.
About Agiliance
Agiliance is the leading provider of Governance, Risk and Compliance (GRC) solutions. Agiliance GRC technology minimizes manual auditing through scalable automation to enable closed loop risk management and continuous compliance. Agiliance customers use real-time risk analysis to optimize business performance and make better investment decisions. Unlike legacy offerings that can take nearly a year to deploy, Agiliance's Fortune 2000 customers deploying the RiskVision™ platform achieve demonstrable value with full automation within the first 90 days, made possible with Agiliance's most extensive library of technical integrations and GRC content. RiskVision scales with your business to manage the massive amounts of data, assets, people and processes that are required to ensure 100 percent risk and compliance coverage. For more information, please visit www.Agiliance.com.
Agiliance, OpenGRC and RiskVision are trademarks of Agiliance, Inc.
Media Contact
Schwartz Communications
Samantha Sok
(415) 512-0770
agiliance@schwartz-pr.com
