If you have questions or need assistance, contact Wendy Tanner at +202. 202.789.4458.

Best Governance, Risk and Compliance Solution

Recognizes the Best Governance, Risk and Compliance (GRC) Information solution that provides industry-leading audit, risk and compliance solutions and/or expert insights that enable businesses to connect regulatory developments with internal policy systems, organizational risks and controls, and regulatory training. Nominees may submit solutions that focus on business and regulatory issues, connect financial goals to regulatory obligations, financial compliance products, managing anti-money laundering, "know-your-customer" processes and/or efficiently link corporate activities to audit and reporting requirements.

ControlPoint - Axceler

Through visibility and control Axceler's governance tool ControlPoint mitigates risks of data leakage, data theft, and non-compliance that come with social collaborative platforms. Today, it allows organizations to run their SharePoint environments according to their governance plans, enabling IT to understand usage, identify risk, and remediate problems.

ControlPoint provides the ability to explore, protect, analyze and control SharePoint by giving full visibility into an organization's SharePoint environment. Supporting both on premise, hosted and in the cloud environments, ControlPoint enables managers to automatically prevent non-compliant activities, and make better decisions with robust reporting and intuitive dashboards.

ControlPoint offers powerful control with comprehensive permissions management, move and copy content capabilities, in-depth activity and storage analysis and the ability to control SharePoint usage with policies. With ControlPoint organizations can enforce SharePoint governance automatically, improve the focus of their teams, avoid security and compliance breaches and their associated costs, increase end-user adoption and reduce the demands of the SharePoint infrastructure and the overall costs of SharePoint ownership.

  • Go To Axceler's Web Site
  • Go To Product Site
  • Additional information can be found online at:

    Bloomberg Government - Bloomberg Government

    Bloomberg Government is the single source for professionals who need to understand the business impacts of government actions so they can work quickly, decisively and effectively. This comprehensive, subscription-based, online tool collects best-in-class data, provides high-end analysis and analytic tools, and delivers deep, reliable, timely and unbiased reporting from a team of more than 2,300 journalists and multimedia specialists worldwide.

  • Go To Bloomberg Government's Web Site
  • Go To Product Site
  • Dow Jones Risk & Compliance Portal - Dow Jones & Company

    The global financial crisis has prompted 79% of firms to change their approach to managing and responding to risk in the last three years, according to a recent study*. Firms expect volatility areas such as supply chain, regulatory & compliance, and financial risk to increase in the coming years, yet, less than 25% have systems in place to continually monitor these risks.

    In a challenging financial climate, firms are expanding beyond their traditional markets into regions where corruption, financial and systemic risk are far more prevalent, and reliance on third party relationships is high. New regulation and increasing enforcement raises the stakes further.

    The Dow Jones Risk & Compliance Portal is a powerful, cost-effective, platform that allows companies to safely navigate the compliance and commercial risks associated with expanding into new territories. The vast data and technology resources of Dow Jones, The Wall Street Journal, Factiva and a dedicated Risk & Compliance global research team combine to deliver an innovative workflow solution for assessing, investigating and monitoring third party risk; maintaining a clear audit trail; and collating management information - enabling firms to ensure their third parties are an opportunity for growth rather than a risk.

    *Deloitte & Forbes Insights

  • Go To Dow Jones & Company's Web Site
  • Go To Product Site
  • Additional information can be found online at:

    EDR Lender Portal - Environmental Data Resources

    A collaborative workspace for commercial and residential real estate lenders, the EDR Lender Portal is a web-based application that simplifies property due diligence and compliance, enabling lenders to manage policy, screen properties, procure third-party assessment services, and produce detailed reports and historical archives.

    Through the Lender Portal's policy configurator, lenders can manage compliance with internal risk policy or external regulations such as SBA's Record Search with Risk Assessment requirements.

    As an environmental screening tool, lenders can quickly generate reports identifying any environmental concerns, and plot their locations in relation to target properties. Reports are generated from EDR's proprietary databases as well as federal, state, local and tribal environmental records. If warranted, lenders can procure higher levels of due diligence from third party suppliers through the system. Managing the procurement of assessment services such as appraisals or environmental Phase 1 ESA's is easy. You can efficiently manage all aspects of an assessment, be it issuing request for proposals, tracking and grading vendors, assigning or extending deadlines, or retracting assignments.

    The Lender Portal serves as a company's filing cabinet, managing and archiving all documentation including third-party reports, invoices, and other loan specific documents.

  • Go To Environmental Data Resources' Web Site
  • Go To Product Site
  • Additional information can be found online at:

    Keylight platform - LockPath

    Keylight delivers a revolutionary GRC content engine that integrates risk/regulatory intelligence, empowering customers to manage policies, procedures and standards through one extensible platform, on-premise or in the cloud.
    Easy-to-install and highly effective, it empowers users to make better business decisions. Gathering information natively and from third-party connectors (log/SIEM, vulnerability scans, asset/configuration management, DLP, etc.) through its patent-pending Dynamic Content Framework, it simplifies manually intensive data analysis and reporting processes. Keylight is the only GRC platform that delivers complete UCF content integration (4,000 controls covering 30,000+ citations from 500+ authority documents and laws, standards and best practices) and comprehensive Shared Assessments vendor risk assessment content. This provides valuable context, letting organizations quickly assess and demonstrate security/compliance while keeping pace with regulations.
    Scalability, correlation of controls to the many complex IT ecosystems and an easy-to-use interface allow organizations to quickly understand regulatory requirements, evaluate compliance posture and assess outstanding risk.
    Keylight is the foundation of all LockPath solutions Business Continuity Manager, Compliance Manager, Incident Manager, Risk Manager, Threat Manager and Vendor Manager. Winner of the Corporate Integrity GRC Technology Innovation Award and lauded at MIT's 2012 CIO Symposium Innovation Showcase as a cutting-edge B2B solution combining innovation and bottom-line impact, LockPath is transforming GRC.

  • Go To LockPath's Web Site
  • Go To Product Site
  • Additional information can be found online at:

    Sonatype Insight - Sonatype

    Sonatype is the maker of Component Lifecycle Management (CLM) products and information services that enable organizations to realize the promise of agile, open-source software development while avoiding security, quality and licensing risks. Sonatype operates the Central Repository, the industry's primary source for open-source components, housing more than 400,000 components and serving more than 7.5 billion requests per year from more than 60,000 organizations. As such, only Sonatype has a view into how, and what components are being used by organizations to build mission-critical software. The company has built a sophisticated infrastructure for mining virtually everything knowable about a given Java component. Sonatype's event-driven knowledge engine brings together information from the Central Repository coupled with public and private metadata resources and delivers this knowledge directly into the tools that developers and development managers use every day via the Insight platform. Sonatype Insight brings real-time component intelligence to the CI server with Insight for CI; to the repository manager with Insight for Nexus and Nexus Professional; and with Insight Application Health Check. The company also provides commercial versions of popular Java development infrastructure products including Apache Maven, Nexus, Hudson, and m2Eclipse.

  • Go To Sonatype's Web Site
  • Go To Product Site
  • Additional information can be found online at: