Posts

Tell Me a Story!

In my role leading the Solutions team at Onspring, I have the distinct honor of being one of our company’s primary storytellers. When your primary responsibility is helping clients piece together the various, individual aspects of their GRC programs—risk assessment software, compliance and control, and other solutions—into a compelling narrative about the overall health of the organization, you quickly realize that this analogy is apt.

When the Customer Speaks

“There is nothing more powerful or honest than the voice of the customer,” Onspring’s Founder and CEO Chris Panteanius, said of the award. “SoftwareReviews requires a LinkedIn profile to ensure vendors cannot vote for themselves or disparage competitors’ offerings, and it takes no money from vendors to determine these rankings. Instead, they rely exclusively on the customer’s voice — the true experts who use, and dare I say, stake their careers on the success of these products every day.”

Searching for a Great Summer Read

There are a lot of places where you can find reviews of Onspring’s platform, but only a handful from the real, vetted voices of users. Gartner’s Peer Insights website showcases vendors and products with reviews from real customers. Onspring is honored that our customers expressed their views of our solutions on this site and our overall rating on Peer Insights is five stars.

Workplace FOMO

A lot of fear comes from not being prepared, not having the correct support needed to fulfill and complete a job. The more it happens, the more FOMO creeps in and takes over, and that can become a truly destructive force in an office setting.

IRM vs. GRC: What’s in a Name?

IRM vs. GRC: What’s in a name? And what does this all mean? For many it means learning a new language and making old terms taboo. For others it means straddling both sides of the fence. And for others it doesn’t mean very much at all. Jason Rohlf explains.

Transforming GRC (and Other Tales from the Trade Show Floor)

After a week at RSA Conference, talking with current and prospective clients and demoing our GRC solutions, I’m looking forward to a quiet day back at the office. But I also feel really good about what happened this week. We had many excellent conversations with people who are eager for next-generation technology and fresh ways to solve problems. I can’t tell you how many times we heard people say, “I’m looking for something new.”

GRC Groundhog Day: Same Thing, Different Result?

Your organization must place its primary focus on the execution of the critical GRC processes that have been vetted and validated. That said, as you ride the ebbs and flows of your business, it is crucial to perform periodic assessments of your processes to make sure it’s giving you what you need. Keep in mind that this does not merely involve reviewing your process documentation, making a few tweaks, and calling it a day. Rather, you should focus on asking yourself some tough questions.

Supporting Your Solution After the High-Fives

Getting help with software implementation from trained experts is great. But what happens when the consultants are gone? Will you be equipped for success? Evan Stos shares three helpful tips for becoming self-sufficient and “owning” your solutions right away.

What Are Other People Doing? Maybe You Don’t Want to Know

I have a running list of recurring phrases in GRC (there are quite a few), and I’d like to share two of them with you: specifically, my favorite and my least favorite. And since I think I read somewhere that it’s always better to lead with bad news (or maybe it was the other way around?), I’ll start with my least favorite: “What are other people doing?”

Continuous Improvement in GRC

An application built into a GRC platform to facilitate a business process will never truly be “finished.” When you first implement a business process, think of it like you would a software product. What you just implemented is essentially “version 1.0.” Over time and through repeated end-user exposure, users will request updates. Some of those updates will be minor, like adding a value to a dropdown list, and some will be major, like completely overhauling users’ access.

The Thing About Milestones

For those of us who live in the GRC consulting world, birthday milestones are a bit like project milestones. Some are big events. Some are barely noticed. Some are cause for celebration. Others are simply a jumping-off point for the next big thing.

“How Do You Compare to GRC Vendor X?”

When I’m asked the “How do you compare?” question or one of its many derivatives, I simply respond as follows: “To be honest, I don’t really have any experience with Product X, and anything I’d tell you would just be hearsay, so I can’t honestly make that comparison. Instead I’d like to hear about your goals and objectives so we can figure out a way to leverage Onspring to help you accomplish them in the best way possible.” Period.