Drata introduced Drata Risk Management, to enable customers to manage end-to-end risk programs by constantly monitoring, identifying, assessing, and treating risks. Following the recent launch of Drata’s Trust Center, Risk Management is now integrated into the company’s current platform to provide a more comprehensive view of developing and maintaining a healthy security posture.
Adam Markowitz, Co-Founder, and CEO of Drata stated, “Drata aims to be the trust layer between our customers and those they do business with, and we know compliance automation is just one critical piece of that equation. Launching Risk Management and integrating it into our platform is one of the many steps we’re taking to address the maturing needs of customers advancing in their compliance journey.”
Companies of all sizes and industries face a plethora of risks that can have long-term consequences for their security, reputation, and financial well-being, but monitoring risks frequently results in the management of cumbersome data sheets or siloed tools. With the majority of business executives unsure how or when their organization will be impacted by a cybersecurity incident, Drata’s Risk Management solution gives customers who already have a mature risk and compliance program a centralized view of all potential risks, allowing them to make strategic decisions across the organization and resolve issues quickly.
The comprehensive Risk Management solution includes a risk register that creates and maintains a risk register to identify and analyze risks, proactively monitor, and manage risks, recognize evolving patterns, and more, as well as a library of more than 150 pre-mapped threat-based risks based on established sources such as NIST SP 800-30, ISO 27005, and HIPAA guidelines.
Continuous automated monitoring to evaluate and proactively notify customers about the effectiveness of their controls to mitigate new or evolving risks. The Drata Control Framework (DCF) comes pre-mapped to Drata’s threat-based risk library as well as the requirements of multiple security and privacy standards and regulations for integrated risk and compliance.
Tonya Thepthongsay, Director of Risk and Compliance at Rialtic commented, “Drata’s Risk Management module adds enormous value to our risk management program. Automating the relationship of risks to controls and tests in Drata gives us near real-time visibility to changes in our risk environment. The ability to assign risk owners and automate the follow up process elevates risk visibility and accountability throughout the business.”
