GOAT Risk

GOAT Risk

GOAT Risk™
+
+
Visit Website

About

GOAT Risk™ is an award-winning, low cost, cloud-based platform that makes risk management simple, fast, and effective. Designed for organisations of all sizes, GOAT replaces outdated spreadsheets with a dynamic, easy-to-use solution - perfect for both risk experts and non-experts alike. With a powerful yet intuitive interface, you can streamline risk management and assurance activities in a single source of the truth. There's no setup or installation costs. And no minimum term. Just an effective, low-cost risk management solution starting from £30 per month. With fast collaboration, powerful 1-click reporting, and a great user experience, GOAT drives accountability and ownership, saving you time and effort. Highly configurable for a huge variety of use cases, GOAT helps you stay ahead.

About

A GRC solution for technology-focused SMB and Enterprise Information Security teams. StandardFusion eliminates spreadsheet pain by using a single system of record. Identify, assess, treat, track and report on risks with confidence. Turn audit-based activities into a standardized process. Conduct audits with certainty and direct access to evidence. Manage compliance to multiple standards; ISO, SOC, NIST, HIPAA, GDPR, PCI-DSS, FedRAMP and more. Manage vendor and 3rd party risk, and security questionnaires easily in one place. StandardFusion is a Cloud-Based SaaS or on-premise GRC platform designed to make InfoSec compliance simple, approachable and scalable. Connect what your organization does, with what your organization needs to do.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Organisations of all sizes

Audience

Information Security teams at SMB and Enterprise across industries

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

£30 per month
Paid plans include monthly subscriptions of the full system spanning across six tiers, details of which are outlined below (all prices in GBP). Annual plans are available giving 12 months for the price of 10:

STARTER (1 Risk Profile and up to 3 Users) - £30/month, additional Users at £10/month each.

STANDARD (5 Risk Profiles and up to 10 Users) - £150/month, additional Users at £15/month each.

STANDARD PLUS (8 Risk profiles and up to 15 Users - £240/month, additional Users at £16/month each.

ENTERPRISE (15 Risk Profiles and up to 30 Users) - £450/month, bundles of 10 additional Users at £150/month each + Enterprise Functionality inc. Export to .ppt, .xls, & .doc, Multi-Admin & Annual System Health Check.

ENTERPRISE PRO (22 Risk Profiles and up to 50 Users) - £660/month, bundles of 10 additional Users at £132/month each + Enterprise Functionality + PRO Functionality inc. Advanced Search & Report, Editable Risk Universe, Control Library, Editable Heat-Map, Request Update.

ENTERPRISE PRO + Control Assurance (25 Risk Profiles and up to 60 Users) - £750/month, bundles of 10 additional Users at £125/month each + Enterprise Functionality + PRO Functionality inc. Advanced Search & Report, Editable Risk Universe, Control Library, Editable Heat-Map, Request Update + Control Assurance Functionality inc. Control Assessments, Assessment Workflows & Access, Controls Reporting & Assurance Mapping. Additional Risk Profiles, £30/month each.

Single Sign-On available on Annual Plans at additional cost.

Unlimited Risk Profile and User Plans available upon request.
Free Version Not Supported
Free Trial Supported

Pricing

$1800 per month
Multiple licensing tiers available; Cloud and On-Premise
Free Version Not Supported
Free Trial Supported

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 4.3 / 5
design 4.7 / 5
support 4.7 / 5

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5

Pros from Real Users

Pros

  • Simple and fun interface so users will engage with risk. Very low cost. Reports are excellent. Control types and other tips to educate users.
  • Easy to deploy. Easy to use. Little training required. Inexpensive compared to almost all other offerings.
  • Perfect for an events catering business like ours. We do a lot of work with European local & central governments and need to evidence we have a risk management process in place as a part of any tender. The system is easy to use, which is essential, as we're not big enough to have our own dedicated resource. Useful templates and tips included to help quickly set things up. I especially liked the drag and drop risk assessment which helped us create our first risk profile within an hour.

Pros & Cons from Real Users

Pros

  • The interface is very nice; easy to use and understand. I like the way the info comes together to paint a larger picture to run our program. It's deceptively simple; compliance is not a simple thing, but StandardFusion makes it simple to understand. I was able to build a program and start an audit for a client, and realize the value add in only 2 to 3 weeks after purchase. The process of undergoing an audit has been drastically simplified. Having StandardFusion not only saves time but has been a comfort and frees me up from a lot of that worry. All the evidence we need to provide is already in the platform and I can even give auditors guest access and enable them to pull reports on their own. StandardFusion is full-featured at an accessible cost.
  • Working with the SF team has been great. The product has helped several clients simplify their ISMS and audit processes. I now recommend this product with every ISO 27001 and SOC2 implementation
  • That it guides you through every step of your compliance requirements. If you are not very familiar with each and every item in the requirements, the software shows you how to get there and don't miss requirements.
  • GT.net runs a SOC 2 program and undergoes regular audits. We adopted StandardFusion two years ago to get a better handle on managing our controls, organizing policies, streamlining audits and ensuring we are meeting our commitments to our customers. StandardFusion has been great for us: * No more tracking things in spreadsheets, StandardFusion has become the central resource that everyone can use for policies, risk analysis, controls and more. * Easy to use interface makes working with hundreds of controls simple and fast. Simplifies the audit process with external auditors as everything is easily located and tracked. * The StandardFusion support team have been amazing, and onboarding was great. They helped load and setup the system based on our existing SOC 2 reports. We were able to get up and going really quickly. * The software is constantly improving, and the team is very responsive to feature requests and changes. Audits have gotten easier every year.

Cons

  • I honestly can't think of anything that I don't like about StandardFusion. We've used it to perform external audits for our clients, and although it's not purposely built for that dual use, I have been able to adapt it successfully. While it's not a "con," I'd like to see more focus on that area.
  • Nothing! Our clients are very happy with the product. Any time we've found something that wasn't quite right, the team has resolved the issue very quickly.
  • I really like all the features, there is really nothing that I don't like. I guess I wished I could have access to it earlier than I did
  • We haven't really had any negative experiences. Any issues with the software we have found have quickly been addressed by Standard Fusion and not stopped us from using it.

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Company Information

GOAT Risk™
Founded: 2018
United Kingdom
goatrisksolutions.com

Company Information

StandardFusion
Founded: 2016
Canada
www.standardfusion.com

Alternatives

Alternatives

EasyRisk.io

EasyRisk.io

Swiss Security Hub AG
Onspring

Onspring

Onspring GRC Software
STREAM Integrated Risk Manager

STREAM Integrated Risk Manager

Acuity Risk Management

Categories

Categories

Integrated Risk Management Features

Audit Management Supported
Compliance Management Supported
Dashboard Supported
Disaster Recovery Not Supported
Incident Management Supported
IT Risk Management Supported
Operational Risk Management Supported
Risk Assessment Supported
Safety Management Not Supported
Vendor Management Not Supported

Risk Management Features

Alerts/Notifications Supported
Auditing Supported
Business Process Control Not Supported
Compliance Management Supported
Corrective Actions (CAPA) Supported
Dashboard Supported
Exceptions Management Supported
Internal Controls Management Supported
IT Risk Management Supported
Legal Risk Management Supported
Mobile Access Supported
Operational Risk Management Supported
Predictive Analytics Not Supported
Reputation Risk Management Not Supported
Response Management Not Supported
Risk Assessment Supported

Integrated Risk Management Features

Audit Management Supported
Compliance Management Supported
Dashboard Supported
Disaster Recovery Not Supported
Incident Management Supported
IT Risk Management Supported
Operational Risk Management Supported
Risk Assessment Supported
Safety Management Not Supported
Vendor Management Supported

Risk Management Features

Alerts/Notifications Not Supported
Auditing Supported
Business Process Control Supported
Compliance Management Supported
Corrective Actions (CAPA) Supported
Dashboard Supported
Exceptions Management Supported
Internal Controls Management Supported
IT Risk Management Supported
Legal Risk Management Not Supported
Mobile Access Not Supported
Operational Risk Management Not Supported
Predictive Analytics Not Supported
Reputation Risk Management Not Supported
Response Management Supported
Risk Assessment Supported

Audit Features

Alerts / Notifications Not Supported
Audit Planning Not Supported
Compliance Management Supported
Dashboard Supported
Exceptions Management Supported
Forms Management Not Supported
Issue Management Supported
Mobile Access Not Supported
Multi-Year Planning Not Supported
Risk Assessment Supported
Workflow Management Supported

Compliance Features

Archiving & Retention Supported
Artificial Intelligence (AI) Not Supported
Audit Management Supported
Compliance Tracking Not Supported
Controls Testing Supported
Environmental Compliance Not Supported
FDA Compliance Supported
HIPAA Compliance Supported
Incident Management Supported
ISO Compliance Supported
OSHA Compliance Not Supported
Risk Management Supported
Sarbanes-Oxley Compliance Supported
Surveys & Feedback Not Supported
Version Control Supported
Workflow / Process Automation Supported

Data Governance Features

Access Control Supported
Data Discovery Not Supported
Data Mapping Not Supported
Data Profiling Not Supported
Deletion Management Not Supported
Email Management Not Supported
Policy Management Supported
Process Management Supported
Roles Management Supported
Storage Management Not Supported

GDPR Compliance Features

Access Control Supported
Consent Management Not Supported
Data Mapping Not Supported
Incident Management Supported
PIA / DPIA Supported
Policy Management Supported
Risk Management Supported
Sensitive Data Identification Not Supported

GRC Features

Auditing Supported
Disaster Recovery Not Supported
Environmental Compliance Not Supported
Incident Management Supported
Internal Controls Management Supported
IT Risk Management Supported
Operational Risk Management Supported
Policy Management Supported

HIPAA Compliance Features

Access Control / Permissions Supported
Audit Management Supported
Compliance Reporting Supported
Data Security Supported
Documentation Management Not Supported
For Healthcare Not Supported
Incident Management Supported
Policy Training Supported
Remediation Management Not Supported
Risk Management Supported
Vendor Management Supported

PCI Compliance Features

Access Control Supported
Compliance Reporting Supported
Exceptions Management Supported
File Integrity Monitoring Not Supported
Intrusion Detection System Not Supported
Log Management Not Supported
Patch Management Not Supported
PCI Assessment Not Supported
Policy Management Supported

Policy Management Features

Approval Process Control Not Supported
Attestation Not Supported
Audit Trails Not Supported
Policy Creation Supported
Policy Library Supported
Policy Metadata Management Not Supported
Policy Training Not Supported
Reporting / Analytics Supported
Version Control Supported
Workflow Management Supported

Vendor Management Features

Audit Management Supported
Contact Management Supported
Customer Database Not Supported
Self Service Portal Not Supported
Supplier Master Data Not Supported
Transaction History Not Supported
Vendor Maintained Profiles Not Supported
Vendor Managed Inventory Not Supported
Vendor Performance Rating Not Supported
Vendor Qualification Tracking Not Supported

Integrations

Common Controls Hub Not Supported
Confluence Not Supported
Jira Not Supported
Jira Work Management Not Supported
Okta Not Supported
Slack Not Supported

Integrations

Common Controls Hub Supported
Confluence Supported
Jira Supported
Jira Work Management Supported
Okta Supported
Slack Supported
Claim StandardFusion and update features and information
Claim StandardFusion and update features and information