Diligent One Platform offers a unified solution for Governance, Risk, and Compliance (GRC) management, providing a comprehensive overview of risks and insights in one place.
N/A
Proofpoint Intelligent Compliance
Score 8.3 out of 10
N/A
Launched in August, 2022 and replacing Proofpoint Archiving and Compliance, Proofpoint's Intelligent Compliance Platform offers enterprises regulatory compliance safeguards while simplifying corporate legal protection practices. The platform offers AI-powered collection, classification, detection, prevention, search, eDiscovery, supervision, and predictive analytics, helping companies to meet complex compliance and information governance obligations.
Product is a great tool to serve as a central point to compile and document sox controls. This allows transparency across the team and teammates to edit and view progress. The tool also provides an interface that will make it easy for the internal audit team to track and compile control requests. I particularly like how it lets all of the control owners take ownership of their controls. I am currently exploring some of the advanced tools that support testing and the accuracy and completeness of our data, which i'm very excited to explore.
Proofpoint Intelligent Compliance is well suited for organizations with a large amount of employees, in my opinion, as they have a lot of options for grouping users in various ways to send specific learning content to them. For a smaller organization, the employees might utilize all of the built-in training videos, phishing simulations, and content more rapidly, which would not justify the pricey cost of the tool.
Email archiving. Being able to access, on the fly, your entire email archive. Being able to filter by date, sender, attachment, etc. It can get really granular and is able to pull up records fast.
Targeted Attack Protection for all incoming emails. Having the ability to automatically scan, quarantine, or re-write URLs within emails. Comparing incoming emails to potential phishing attempts already seen by other institutions.
Email encryption & automatic encryption are based on certain rules set up on the firewall. e.g. automatically encrypt outgoing email if it has an attachment or contains a string of numbers that may be personal information.
Report structure is limited and so it forces you to pay for ‘impact reports’ instead of allowing customers to have more freedom in report design
The dashboard lists every step in your business process (or area) instead of showing progress by phase. For example, if you want to know where you stand in a business process, it counts every step within the control (for ex. walkthrough, test plan, interim, final). So a process that has 10 controls will show you how many steps out of 40 are completed ( 10 x 4) which is not helpful.
Analytics/robotics is not set up by default and you have to have them set up hosting for it (even if you already paid for the package).
You cannot have customized dashboards automatically updated somewhere. You have to go into the reports module and double-click the report to run it.
The storyboard feature is very limited and isn’t linked to the reports module as mentioned above.
The end-user interface is lacking in appeal/aesthetics and is not that intuitive. I have seen archive solutions that don't work very well have a better interface than this. I think the interface can be prettied up quite a bit.
The admin interface is lacking in features and is not intuitive. It has more capabilities than the previous archives I've used, but utilizing these features is a little complicated without demos or being walked through it.
We have had a lot of accounts not map properly. Apparently, there is a limit as to how many errors can be outstanding before you run into issues because all the emails tied to those issues are "queued" waiting for a home (and there is a storage limit for that). I have to set a reminder to check that periodically and resolve the issues manually.
HighBond by Galvanize support has some of the best and fastest support that I have experienced. Though we only contact them through emails, they were quick to provide insightful information about our problems. Whenever we email them about an issue, they would be able to reply in less than an hour, ready and prepared with useful solutions to address the issue.
Initial setup is quite involved as there is a steep learning curve. Documentation and support are lacking. The default dashboard/reports are not sufficient and require customization and additional costs. Once setup, the data analysis automation saves a lot of time and manual effort for audit and support teams
Diligent Highbond stacks up somewhat poorly against our other tools. In addition to what was included above, we use some smaller tools that fulfill many of the gaps left by Diligent Highbond. We have since started to move away from Diligent Highbond. Alteryx is better at processing data and their server tool can be used to publish results for review.
We did a bake off and for our particular needs Proofpoint was the right product. We used a matrix with requirements and their product checked all the boxes. Making it a easy decision.
