Procurement and Tooling
GRC platform
Software that automates evidence collection, control monitoring and policy management for governance, risk and compliance. Examples include Drata, Thoropass and Sprinto.
Why it matters: a platform automates the evidence, not the management system. Somebody still has to define scope, run the risk assessment and write the Statement of Applicability.
Related terms
Questions about how this applies to you? Book a free 45 minute diagnostic.