Agiliance RiskVision v6.5
Strengths: Visibility into risk using heat maps and business intelligence-driven dashboards; reporting and analytics; mobile device support
Weaknesses: No SQL support, only MySQL
Verdict: RiskVision is a full-featured risk solution covering all aspects of compliance, business and IT risk. Recommended as a risk management solution
Agiliance RiskVision manages enterprise risk by making it visible, actionable and measurable across business units, IT operations and security management in near real-time. It comes as a single platform with multiple modules that can be activated via licensing. Manager modules are available for compliance, enterprise risk, vendor risk, threat and vulnerability, and policy and incident.
Agiliance provides a holistic view of security and compliance in one integrated enterprise platform that enables companies to move from a reactive, threat-driven approach to a proactive, risk-aware posture. This brings together threat, vulnerability, security configuration, compliance and risk assessments data. RiskVision correlates this data against its 'business-criticality aware' asset database, as well as its multi-regulatory compliance framework of 50-plus standards and policies, providing organisations with an aggregated view of their risk and compliance posture.
This solution is delivered either as on-premise software running on available hardware or as an on-demand, cloud-based platform. It requires Microsoft Windows Server 2003 or 2008, and either MySQL 5.5 or Oracle Database 11g R2 for server side deployment, and a simple web browser and Adobe Flash v10 or higher for the client. Typical deployments range between 30 and 60 days.
RiskVision has a strong, out-of-the-box policy module that is built off Cobit, ISO and NIST frameworks. There is a lot of pre-populated content for policy, assessment, controls and reporting and RiskVision supports continuous import/export of data using prebuilt templates from MS Word, Excel and XML. Users can automate assessments against these standards or internal controls. The workflow tool makes it easy to develop and manage the assessments. This also has a feature that allows one to validate a user response to ensure they actually read what was sent.
It comes with a fully integrated ticketing solution and can also be integrated to the common ticket platforms on the market. There is also built-in change management support for auditing and logging of all changes.
New features in this version include mobile device and user detail supporting risk related to bring your own device (BYOD). RiskVision will collect and correlate mobile data from mobile device management vendors. It can then rate access versus risk related to applications, such as correlating a user identity to their level of access. Reporting is enhanced through a co-branded integration with business intelligence suite Jaspersoft for delivering robust dashboards and data analytics capabilities. There are more than 300 dashboards and reports that come out of the box geared to delivering audit-level detail. We were impressed by the simplicity of the interface. One can easily drill down through a chain of risks and get right to the impacted assets and supporting controls.
Standard support is included in the price of the software and includes phone and email access, while 24/7 extended support is available for approximately 30 per cent of the purchase price.
Agiliance RiskVision is a full-featured risk solution that provides a lot of out-of-the-box content, delivers a simple, easy-to-use interface for technical and business users alike, and delivers a powerful analytics component that really helps to present and manage risk.