IT and Cyber Risk

Want to be able to define and track KRIs for Threats and Vulnerabilities

If there are more number of questions in assessment secion, when assessor click on response then customer need to know for which question, they need to provide response.

Ask - Siemens Energy Cyber Risk Team uses MetricStream Qualitative Risk Assessment approach as of now. Use Case - While the Cyber Risk Team uses our tool to perform risk assessment, they want to migrate risk assessments of different teams/subsidia...

Ask - Segregation of risks, corresponding risk assessment plans, risk assessments, issues/actions between Cyber Risk and Business Risk. In customer words - separate the data visibility between RIC and CYS. Use Case - There are two teams in Siemens...

NIST SP 800-30 RMF is fast becoming a mandate for information security risk assessments for federal entities.

Product should have configuration option to restrict data as per need. Ideally we should have configuration which should allow to define rule(s) so we can restrict data consumption as per need. Currently CMDB connector pulls anything/everything fr...

Product should have configuration option to address remap the different set of data to asset Library. Currently CMDB Service data get ingested as Process in Metricstream. CMDB service table stores all high level service information which is high l...

Can we please have product also as an option along with the existing ones.

When multiple rows are added in the scope selection section of the Risk Assessment form and a questionnaire is selected, system sends the questionnaire to the entire list of scoped items as just one assessment. Expected - In the 'Perform IT Risk A...

As of today, application allows to select multiple controls in the control effectivness section inside risk assessment form but not able to submit with multiple controls. This is a common scenario to have multiple controls for a risk that is getti...