Frequently Asked Questions

The organization will not have a deployment, operational or implementation impact. Continuum GRC is a FedRAMP Authorized SaaS solution in the GovCloud. The company is responsible for the deployment which typically takes 2-24 hours before the client may gain access to the fully functional system.

The implementation requirements include required user account creation and notification email addresses for system notifications at a minimum. Any additional integration setup for SAML SSO, MFA and any organizationally adjusted site parameters within the Continuum GRC SaaS would take minutes to define.

Continuum GRC employs in-house technical service employees as well as well-trained service partners covering all aspects of our customer commitments. A few channel partners have certified installation, training, custom development, administration support and fully managed options.

Continuum GRC’s Training & Orientation offerings include online training videos and literature, online orientation videos and literature, virtual 2-Day Boot Camp options, on-site 2-Day Boot Camp options, on-demand time and materials-based consulting sessions, and Certification Options for both the (CGRCP) Continuum GRC Professional and the (CGRCA) Continuum GRC Administrator.

Continuum GRC is a FedRAMP Authorized SaaS solution in the GovCloud. The company is responsible for the deployment which typically takes 2-24 hours before the client may gain access to the fully functional system.

All governance, risk, and compliance modules are fully functional and deployed at the same time as the base system.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides robust role-based access to the system resources allowing for the granular provisioning of risk and security assessment modules, compliance and audit modules, policy development and management features, form-questionnaire-module development tools and a plethora of other system features.

Continuum GRC forms-questionnaires-modules offer intuitive, logic-driven, customizable user experiences that are only limited by the user’s creativity.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities.

Additionally, our dynamic data import tool allows for the importation and automatic form-questionnaire-module building creation to migrate from legacy applications into the automated power of Continuum GRC.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides extensive on-board reporting and audit logging features all of which may be sent to external integrated applications.

Create hundreds of dashboards and reports with many popular pre-built dashboards, but also end-user-defined reports that may be focused on the macro-level down to the micro-level.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarded. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a Cryptographic Chain-of-Custody Evidence Management capability that associates system documents and all files in the system with a specific system user.

All Continuum GRC form-questionnaire-modules have document production capabilities with outputs such as Word, Excel, PDF, and other document outputs. The Document Manager within the system allows for customary document and file management features.

The Template Manager allows for rich-text document creation and management capabilities for Rapid Document Generation, Digital Signatures, Change Detection Indicators, OSCAL, Multipart Excel, Word, CSV Spreadsheet, PDF, and TXT Document Output (POA&M, SSP, etc.), Easy Branding and Formatting.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides familiar form-questionnaire-module style inputs for the collection, maintenance, management, and analysis of risk assessment datasets.

Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps.

Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting.

Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

Continuum GRC has auto-mapped the world's standards and frameworks seamlessly together. These are the most requested modules, but certainly not our entire inventory.

FedRAMP, StateRAMP, EUCS, PCI ROC & SAQ, SSAE 18 SOC 1, & SOC 2, CONMON, POA&M, CSF, CJIS, DFARS NIST 800-171, CMMC, C5, ISO 27001, 27005, 27017, 27018, 17020, 17021, 17025, 17065, HIPAA NIST 800-66, NIST 800-53, NERC CIP & 693, COSO, SEC, NFA, & FINRA, CIS, CTPAT, Cyber Essentials, FDA 21, FIPS 199, NIST 800-30, NIST 800-37, COSO ERM, Third-Party Risk Assessments, Vendor Risk Assessments, Physical Security Risk Assessments, Site Visit Risk Assessments, GDPR, CCPA, DPIA and more.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create any framework requirement with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability.

Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation and customization tools that are drag-and-drop and easy to use.

System administrators are able to easily customize any form-questionnaire-module including those provided by Continuum GRC with any level of customization based on the organization’s end-user inputs.

The Continuum GRC platform was designed to provide an enormous customization capability without requiring any complex programming or professional support services.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides integration support to a variety of network threat/anomaly detection tools. Once the automated integration inputs this data into the systems intake forms-questionnaires-modules then the logic trigger functionality takes over.

System administrators establish simple Boolean rules to trigger events and provide real-time alerts, notifications, reports, and dashboards keeping users informed and up to date.

Continuum GRC standard support options include:

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides integration support to a variety of network threat/anomaly detection tools. Once the automated integration inputs this data into the systems intake forms-questionnaires-modules then the logic trigger functionality takes over.

System administrators establish simple Boolean rules to trigger events and provide real-time alerts, notifications, reports, and dashboards keeping users informed and up to date.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides robust role-based access to the system resources allowing for the granular provisioning of risk and security assessment modules, compliance and audit modules, governance and policy development, management features, form-questionnaire-module development tools and a plethora of other system features.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a flexible licensing model that is ala carte and allows organizations to grow with the platform. Continuum GRC is a modular solution.

First, select a hosting option. Organizations with Federal and or CUI data will need FedRAMP Authorized AWS GovCloud hosting, otherwise, AWS hosting is just right. Deployment typically is between 2-24-Hours for a fully operational system.

Second, select the access options you need. How many administrators, examiners, users, and entity groups do you need? Provisioning these takes just minutes within the Continuum GRC Access Control portal.

Finally, what modules within the categories of Audit & Compliance Frameworks Modules, Risk Assessment & Management Modules, Governance & Policy Development Modules, and any Custom created modules does your organization need? These are deployed in just minutes for stock inventory modules. Custom-created modules are projects planned with an organization but typically take a few days to a week or so for most deliverables.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a fully managed solution that does not require an organization to maintain, patch, or upgrade its system. Continuum GRC support takes care of all updating including frameworks and inventory modules.

Organizations will maintain their own internally created modules and settings, but all other aspects of the Continuum GRC are managed by Continuum GRC.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides an intuitive user and management interface. While Continuum GRC offers many training & orientation offerings include online training videos and literature, online orientation videos and literature, virtual 2-Day Boot Camp options, on-site 2-Day Boot Camp options, on-demand time and materials-based consulting sessions, and Certification Options for both the (CGRCP) Continuum GRC Professional and the (CGRCA) Continuum GRC Administrator, customers rarely find it necessary to purchase enhanced training.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities.

Additionally, our dynamic data import tool allows for the importation and automatic form-questionnaire-module building creation to migrate from legacy applications into the automated power of Continuum GRC.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities.

Additionally, our dynamic data import tool allows for the importation and automatic form-questionnaire-module building creation to migrate from legacy applications into the automated power of Continuum GRC.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides data architecture that is authorized to the Moderate impact level. Our Package ID is FR1915750265. The Agency may use the FedRAMP Package Access Request Form to review the full FedRAMP Authorization details.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption on all database data and file-based data is fully backed up on a daily basis. On a weekly basis, the full system is images and stored in our GovCloud West hot storage Location. Also on a weekly basis, our full system images are stored simultaneously stored in our GovCloud East cold storage. Data does not leave our GovCloud FedRAMP Authorized boundary.

The Continuum GRC FedRAMP Authorized Package ID is FR1915750265 and contains additional information regarding our data retention and preservation implementations. The Agency may use the FedRAMP Package Access Request Form to review the full FedRAMP Authorization details.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides standard support options that include:

The Continuum GRC maintains a rolling three-year product roadmap with no End of Life defined. We are a privately owned sole-source provider and have no external debt or outside investors. We are only beholden to our customers to provide the best long-term solutions.

Continuum GRC does not pay Gartner to appear on the quadrant list. We do not pay-to-play with for-profit reporting organizations.

Easily import external data sources through our patent pending Dynamic Integrator functionality, through custom API integrators, and through our OpenAPI capabilities which suit most data transactions between external systems, legacy systems, and even raw inputs.

Easily import external data sources through our patent pending Dynamic Integrator functionality, through custom API integrators, and through our OpenAPI capabilities which suit most data transactions between external systems, legacy systems, and even raw inputs.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary however, common browsers supported by Windows 10 or higher are supported.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary however, the output reports and templates are all compatible.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary.

The Continuum GRC SaaS solution will accommodate this and more. Simple licensing accounts for the number of users and the system performance requirements.

The Continuum GRC SaaS solution maintains real-time audit logs on all users to be analyzed as needed by administrators and examiners. These reports may also be exportable for further analysis.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary.

The SAML integration feature allows for the connection to internal or external SP-IDP systems that support CAC PIV functionality.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary.

As a FedRAMP Authorized SaaS solution, this requirement is not necessary.

All administrators and examiners in the Continuum GRC SaaS solution have role-based access to activity, change, deletion logs and reports. These are reportable and searchable in the system. They are also exportable in a variety of formats.

No one has the ability to alter these records.

All administrators and examiners in the Continuum GRC SaaS solution have role-based access to audit logs and activity reports. These are reportable and searchable in the system. They are also exportable in a variety of formats.

No one has the ability to alter these records.

As a FedRAMP Authorized SaaS solution, this requirement is mandatory for authorization.

As a FedRAMP Authorized SaaS solution, this requirement is mandatory for authorization.

The Continuum GRC SaaS solution is a drag-n-drop solution that does not require complex programming to utilize its user interface. Users are presented with a logical and user-friendly interface.

Our Section 508 compliance rating is excellent.

The Continuum GRC SaaS solution has a native drag-n-drop form builder tool that allows administrators to easily create any number or type of form templates the organization requires.

The Continuum GRC solution is a SaaS product that will allow the organization to conduct and document audits and evaluations and maintain supporting documentation in accordance with Yellow Book and Blue Book standards leveraging our extensively customizable SaaS platform features.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

The Continuum GRC SaaS solution requires administrators establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

The Continuum GRC SaaS solution has a central document management feature allowing for full policy management, versioning, and inclusions as evidence if needed. All files in the system are protected by FIPS 140-2 validated encryption system.

The Continuum GRC SaaS solution has a variety of workflow tools designed to interface with multiple entry points within a project workflow. These can be as simple as Approval-Deny by designated examiners, to hype-granular event logic driven workflow rules that are created easily with Boolean logic simplicity.

The Continuum GRC SaaS solution provides the ability to clone or copy forms, datasets, modules, and templates within the system. Our patent pending auto-mapping technology even allows for synchronization of project data between different forms and reports in real time.

The Continuum GRC SaaS solution is purpose-built for managing multi-team and multi-user projects. Integral to the solution are features such as the Action ITAM designed for workflow questions, requests, comments, project notes, suspense dates, accountability reporting and other powerful features to satisfy this requirement.

The Continuum GRC SaaS solution is designed to facilitate large audit groups, large datasets with any variety of form fields, audit templates and any other form of bespoke requirement requiring form driven assessments.

The Continuum GRC SaaS solution has a central records management feature allowing for management, versioning, and restoration if needed.

The Continuum GRC SaaS solution is a role-based system and administrators provision access to any project in the system. Completed projects are archived in Read-Only mode.

Completed projects are archived in Read-Only mode. Archival versions are maintained in perpetuity until being deleted by administrators.

Archival versions are maintained in perpetuity until administrators reinitiate or remove these versions.

The Continuum GRC SaaS solution allows for cloning of all datasets to allow for the provisioning of simulation environments within the same system.

Continuum GRC provides 24/7 access to training documentation, videos and learning materials. We also provide advanced 2-Day Bootcamp for administrators. Organizations that require ongoing training and special support may do so under contracted terms.

Organizations that require ongoing training and special support may do so under contracted terms. We have included in the attached Continuum GRC - ATTCH 4 Pricing Template training support by our professional service team.

Continuum GRC provides 24/7 support to customers through a variety of methods such as telephone, email, and online customer portals. There is an extensive online manual available to all users.

The Continuum GRC SaaS solution provides a 24/7 help desk system with responsive remote support by the team. Additional support may be contracted if required.

The Continuum GRC SaaS solution provides a comprehensive administration and user manual to users on a 24/7 online basis.

The Continuum GRC SaaS solution is a role-based system and administrators provision access to any project or resources in the system.

The Continuum GRC SaaS solutions projects, forms, questionnaires, datasets, evidentiary files, reports, and records all have unique identifiers. Additionally, the Record ID feature is a ticketing system feature allowing with unique identifiers for ticketing purposes.

The Continuum GRC SaaS solution provides extensive project management features to report on and track project phases and success metrics along the way. Utilizing features such as real-time Gantt charts, Action ITAM reporting, Status Indicators and other tools to address this requirement.

The Continuum GRC SaaS solution provides native file management capabilities for the file formats. Additionally, document types such as Word and Excel are standard template formats that are manageable within the system. All file types may be processed as artifacts within the system.

The Continuum GRC SaaS solution provides native file management capabilities for the file formats. Additionally, document types such as PDF are standard output report file formats that are manageable within the system. All file types may be processed as artifacts within the system.

The Continuum GRC SaaS solution provides native file management capabilities for the file formats. All file types may be processed as artifacts within the system.

All file types may be processed as artifacts within the system. Additionally, media files are playable within the system. These files may be locally stored and protected within the system or pulled from external sources if authorized.

The Continuum GRC SaaS solution provides SQL big data support capabilities. Additionally, our database integration features allow for the connection to external data sources.

The Continuum GRC SaaS solution has a central document management feature allowing for full policy management, versioning, and inclusions as evidence if needed. All files in the system are protected by FIPS 140-2 validated encryption system. Each file has a unique identifier.

The Continuum GRC SaaS solution has a central document management feature allowing for common file management capabilities. This upload, update, replace or delete capability is also integral to all modules File Upload form element inside existing or custom modules.

The Continuum GRC SaaS solution has native reporting outputs that include Word, Excel, PDF, CSV and text formats all of which are easily updated.

The Continuum GRC SaaS solution is capable of attaching any number or size of attachment in the system. By default, the system is a zero-trust system that requires administrators to establish rules for increasing attachment numbers and sizes. The current defaults are restricted to 15 non-executable files no larger than 5 GB in size. These values are completely adjustable by administrators.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish access to all system resources including project data.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish access to all system resources including project data across multiple projects. Our patent pending auto-mapping is a powerful feature enhancing data synchronization in real-time as needed.

The Continuum GRC SaaS solution provides a full-featured file attachment management system. Utilizing versioning, archiving, and duplication, the ability to retain or recover attachments is native functionality. There is also a system recycling feature that allows for the full restoration of project data and attachments for up to 30 days.

The Continuum GRC SaaS solution is a role-based system and administrators provision access to any project in the system. Completed projects are archived in Read-Only mode including attachments.

The Continuum GRC SaaS solution provides a feature for tagging of datasets with identifiers such as PHI, PII and others. The system can also search or search and replace regular expressions to search for and replace content by users, examiners and administrators.

The Continuum GRC SaaS solution provides a feature for tagging of datasets with identifiers. Additionally, native document functionality allows for the inclusion of metadata which is supported by the file management capabilities of the system.

The Continuum GRC SaaS solution is purpose-built for managing multi-team and multi-user projects. Integral to the system is an anti-collision capability that prevents users from “stepping on each other’s toes” utilizing our socket technology. Other users can see in real-time who is updating a form field and when they are completed.

The Continuum GRC SaaS solution provides digital signature capabilities within the system.

The Continuum GRC SaaS solution provides digital signature capabilities within the system to include any number of signatories.

The Continuum GRC SaaS solution provides functionality to manage the read-write permissions on data. This is controlled by the administrators and controlled by simple permissions or also form logic when processing datasets.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. Only administrators may delete these conversations.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. Only administrators may delete these conversations. Additionally, all forms may have peer-to-peer fields for the entry of comments that may be hidden from anyone without permissions to view them.

The Continuum GRC SaaS solution provides the Status Indicator feature that automatically changes visually to alert reviewers of any change that may have occurred after a review. Additionally, the Audit Mode feature prevents changes by locking the dataset into a read-only mode.

The Continuum GRC SaaS solution provides indexing of supporting documentation directly associated to an evaluation. The upload form elements make this easy and intuitive.

The Continuum GRC SaaS solution provides indexing of supporting documentation such as Word, Excel, and Acrobat directly associated to an evaluation. The upload form elements make this easy and intuitive. Additionally, our patent pending auto-mapping technology allows for cross associations to other projects and data sources.

The Continuum GRC SaaS solution provides indexing of supporting documentation such as Word, Excel, and Acrobat directly associated to an evaluation. The upload form elements make this easy and intuitive. Additionally, our patent pending auto-mapping technology allows for cross associations to other projects and data sources.

The Continuum GRC SaaS solution provides native output support for Word and Excel. All stages of a project through draft and approved production are managed through the system workflow.

The Continuum GRC SaaS solution provides the Status Indicator feature that visually indicates the disposition of a project requirement. Additionally, the project or module templates may have additional checkboxes to represent this requirement.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. Only administrators may delete these conversations. Additionally, all forms may have reviewer fields for the entry of feedback that may be hidden from anyone without permissions to view them. Additionally, the Status Indicator feature that visually indicates the disposition of a project requirement.

The Continuum GRC SaaS solution provides the Status Indicator feature that automatically changes visually to alert reviewers of any change that may have occurred after a review.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary.

The Continuum GRC SaaS solution provides the Status Indicator report feature allowing for easy progress reporting.

The Continuum GRC SaaS solution provides a versioning feature that would allow for the segregation of report versions easily. Additionally, the Status Indicator report allows for separate reporting on all versions of the project report.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. Additionally, the Action ITAM report allows for separate reporting on all versions of the project report.

The Continuum GRC SaaS solution provides the Action ITAM and the Status Report visual features to support this requirement. Additionally, the project or module templates may have additional checkboxes to represent this requirement.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary.

The Continuum GRC SaaS solution provides a drag-and-drop easy form builder tool to completely customize any form, questionnaire, or module.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. The Action ITAM report is designed for this purpose.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. The Action ITAM report is designed for this purpose.

The Continuum GRC SaaS solution provides the Status Indicator feature that indicates unaddressed (gray), unresolved (red), resolved (yellow) and closed (green) indications.

The Continuum GRC SaaS solution is completely interactive allowing for real-time status changes, monitoring of project dates, workflow requirements for tasks or additional information, and a host of many other supporting features.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. The Action ITAM report is designed for this purpose.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. The Action ITAM report is designed for this purpose.

The Continuum GRC SaaS solution provides a full featured document management capability allowing for a searchable attributes such as tags, labels, content, and typical file names.

The Continuum GRC SaaS solution provides the Paragraph form field element that is rich-text capable. It allows for the pasting of external data and utilize rich-text formatting tools as needed.

The Continuum GRC SaaS solution provides the Paragraph form field element that is rich-text capable. It allows for the copy-cut-pasting of external data and utilize rich-text formatting tools as needed.

The Continuum GRC SaaS solution provides support for a variety of browser-based spelling and grammar checking tools to include editable custom dictionaries.

The Continuum GRC SaaS solution provides the Paragraph form field element that is rich-text capable. It allows for the creation and formatting of dynamic tables as needed.

The Continuum GRC SaaS solution provides the Status Indicator feature that automatically changes visually to alert reviewers of any change that may have occurred after a review. The Status Indicator report allows for dashboards and a variety of change reports.

As a FedRAMP Authorized SaaS solution, this requirement would not be applicable.

As a FedRAMP Authorized SaaS solution, this requirement would not be applicable.

As a FedRAMP Authorized SaaS solution, this requirement would not be applicable.

As a FedRAMP Authorized SaaS solution, this requirement would not be applicable.

As a FedRAMP Authorized SaaS solution, this requirement would not be applicable.

As a FedRAMP Authorized SaaS solution, this requirement would not be applicable.

The Continuum GRC SaaS solution provides online viewing of any variety of reports in both document formats and graphic dashboards.

The Continuum GRC SaaS solution provides the Action ITAM feature that provides dashboard views, document notifications and email alerts to deadlines and action items.

The Continuum GRC SaaS solution provides a variety of purpose-created dashboards all allowing for direct linkages to project data.

The Continuum GRC SaaS solution provides the Action ITAM feature that provides dashboard views, document notifications and email alerts to open and or closed items.

The Continuum GRC SaaS solution provides native functionality for notification triggers, rules and workflow events which are defined by administrators.

The Continuum GRC SaaS solution provides native functionality for email notification triggers, rules and workflow events which are defined by administrators.

The Continuum GRC SaaS solution provides a patent pending feature referred to as Nest Entities allowing for the cross-entity or cross-dataset viewing and reporting of projects.

The Continuum GRC SaaS solution provides extensive project management features to report on and track project phases and success metrics along the way. Utilizing features such as real-time Gantt charts, Action ITAM reporting, Status Indicators, and other tools to address this requirement.

The Continuum GRC SaaS solution provides custom report document generation. There is no limitation here in the required outputs and may be produced in Word, Excel, PDF, CSV and text formats.

The Continuum GRC SaaS solution provides extensive project management features to report on and track project phases and success metrics along the way. Utilizing features such as real-time Gantt charts, Action ITAM reporting, Status Indicators, and other tools to address this requirement.

The Continuum GRC SaaS solution provides excellent 508 compliance. There are no known limitations with this requirement.

The Continuum GRC SaaS solution has a native drag-n-drop form builder tool that allows administrators to easily create any number or type of form templates the organization requires.

The Continuum GRC SaaS provides many ready-made reporting dashboards that dynamically update. Our reporting dashboards have hundreds of options that allows for extreme granularity of reporting options.

The Continuum GRC SaaS provides many ready-made reporting dashboards that dynamically update. Our reporting dashboards have hundreds of options that allows for extreme granularity of reporting options.

The Continuum GRC SaaS solution has a native drag-n-drop form builder tool that allows administrators to easily create any number or type of form templates the organization requires.

The Continuum GRC SaaS solution has a native drag-n-drop form builder tool that allows administrators to easily create any number or type of form templates the organization requires.

The Continuum GRC SaaS solution has a variety of workflow tools designed to interface with multiple entry points within a project workflow. These can be as simple as Approval-Deny by designated examiners, to hype-granular event logic driven workflow rules that are created easily with Boolean logic simplicity.

The Continuum GRC SaaS solution requires administrators establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

Are there any other technology vendors that your product(s) integrate with?

• The Continuum GRC SaaS solution’s OpenAPI integrates with hundreds of solution providers.

• The Continuum GRC SaaS feature known as the Dynamic Data Integrator allows for the importation of external data sources, typically from legacy systems clients are migrating from to dynamically create system modules and automatically import large volumes of data.

• In the event that a unique API integration is required to connect to an external solution’s proprietary system, we create these. It generally takes one month to code and QA test the solution for general production viability. Some examples we have are Qualys Scanner, Saint Scanner, Tenable.IO, and others.

Every business and organizational entity in the world must endeavor to eliminate risks that threaten them, their employees, and shareholders. Additionally, those industries have unique regulatory and industry compliance, audit, attestations, and authorizations they must be compliant with.

The Continuum GRC SaaS provides a FedRAMP Authorized and StateRAMP Authorized secure solution that enables the development of those readiness and program requirements; enabled the independent evaluation of risk and compliance by assessment authorities calculating governance, risk, and compliance metrics, dashboards, and documentation during that phase; and facilitates the continuous monitoring and maintenance of these programs for the entire life-cycle of these programs.

Supporting 26 languages, the high degree of automation, integrations, and auto-mapping between the world's compliance frameworks provides an intuitive solution to our clients.

High-level overview of your products and solutions.

Continuum GRC Videos

The Continuum GRC is an agile, affordable risk assessment and compliance management automation solution and is the only global platform authorized for both FedRAMP and StateRAMP requirements. Our Partner Program goal is to drive new business and be more efficient for partners across all verticals of business anywhere across the globe.

Continuum GRC is a collaborative and cost-effective audit & compliance, risk assessment & risk management, and policy & governance development solution that helps our partners be cost-effective.

Auto-mapped standards, automated documentation, real-time status, risk & maturity offerings work across all of the audits, regulatory and risk frameworks in 26 languages saving time and money.

Continuum GRC reduces manual labor by 55% on average, with some tasks such as maintaining multiple frameworks by an astounding 100%.

Enterprise security, dynamic dashboards, document generation, integrations, and connectivity for advanced collaborations.

Automation and creative tools along with evidence management for auditors.

The Continuum GRC SaaS is a full-featured risk assessment & risk management, compliance assessment & compliance management, policy development & policy management system for the enterprise.

Continuum GRC has native functionality for workflows, notification logic, and schedulers are included.

Continuum GRC has native functionality for delegation and assignment workflows.

Continuum GRC currently supports more than 85 of the worlds frameworks with internally developed frameworks also.

Continuum GRC has native functionality for exporting any state of a self-assessment.

Continuum GRC has native functionality for the separation of different groups, entities, divisions, users, companies, etc. through our Entity feature.

Continuum GRC has native functionality for evidence management from a variety of sources including locally attached, automated integrations, and other inputs.

Continuum GRC has native functionality for organizing findings with control requirements and risks.

Continuum GRC has native functionality for issue remediation tracking and workflows.

Continuum GRC has native functionality for Admins to modify any parameter of an assessment module. Examiners are able to change the risk status of the assessment inputs.

Continuum GRC has native functionality for integrating with a variety of external data sources. Additionally, our Dynamic Data Integrator will intake external csv and Excel documents easily.

Continuum GRC has native functionality for Admins and Examiners (a role like an auditor or manager of a user group.) to do this.

Continuum GRC has native functionality for tailoring all parameters without programming changes. We also provide a creation tool for complete customizations.

Continuum GRC has native functionality for auto mapping between control requirements and this includes status and risk.

Continuum GRC has native functionality for displaying risk scores and heatmap style dashboards making it easy to focus on risk priorities.

Continuum GRC has native functionality for displaying risk across many entities, areas, or other grouping based display requirements.

Continuum GRC has native functionality for detailed audit logging and reports that are accessible to Admins and Examiners, however none have the ability to alter these records.

Continuum GRC SaaS is designed for responsive interfaces.

Continuum GRC has native functionality for a plethora of powerful customization features none of which requires any coding.

Continuum GRC has native functionality for scheduled and on-demand reporting, hundreds of real-time dashboards are available.

Continuum GRC has native functionality for allows for custom tagging, classifications and groupings without coding.

Continuum GRC has native functionality for encrypted file management, document management, policy management and protected with a private evidence management system.

Continuum GRC has native functionality for role-based access and delegations.

Continuum GRC has native functionality for the creation and modification of all control frameworks and custom frameworks.

Continuum GRC has native functionality for many levels of workflow.

Continuum GRC has native functionality for a multitude of workflow triggers to notify, schedule, update, and more.

Continuum GRC has native functionality for an Entity which is a grouping of resources and users that may be many layers and many separations.

Continuum GRC has native functionality for site administrators to separate site types in our Entity feature.

Continuum GRC has native functionality for standard risk registrations with separation by Entity site type.

Continuum GRC has native functionality for modifying with our Form Builder tools any module, form, or questionnaire in the system with drag-n-drop ease. This could be a simple as adding a multichoice field to an existing form.

Continuum GRC has native functionality for showing velocity as a percentage of total risk and as velocity as a separate value.

Continuum GRC has native functionality for a variety of audit trail displays including change date data.

Continuum GRC has native functionality for modifying with our Form Builder tools any module, form, or questionnaire in the system with drag-n-drop ease. This could be a simple as adding a multichoice field to an existing form.

Continuum GRC has native functionality for SAML connections to AD and other authentication management systems.

Continuum GRC has native functionality for the uploading, editing, and management of these file types.

Continuum GRC has native functionality for role based delegation to all system resources.

Continuum GRC has native functionality for Rich Text fields supporting this requirement.

Continuum GRC has native functionality for the creation of any type of form. Our Risk Registry module accomplishes this, but may also be modified without coding.

Continuum GRC has native functionality known as an Action ITAM that serves this purpose.

Continuum GRC has native functionality for Administrators to easily accomplish this.

Continuum GRC has native functionality for the exportation in Excel among several other file types.

Continuum GRC has native functionality for advances data searches and filtering.

Continuum GRC has native functionality for reference numbers with our Record ID field element ticketing features.

Continuum GRC has native functionality for real time modifications to all data sets in production, or in archive.

Continuum GRC has native functionality for Administrators to easily accomplish this.

Continuum GRC has native functionality for easy creation of custom frameworks and the modification of standard frameworks with drag-n-drop ease.

Continuum GRC has native functionality for this requirement.

Continuum GRC has native functionality for showing before and after as a percentage of total risk.

Continuum GRC has native functionality for both Examiners and Admins to review audit logs for everyone in the system.

Continuum GRC has native functionality for both Examiners and Admins to review audit logs for everyone in the system.

Continuum GRC has native functionality for both Examiners and Admins to review audit logs for everyone in the system.

Continuum GRC has native functionality for draft, then final, then archive versions.

Continuum GRC has native functionality for any type of form be created. Our Form Builder tools allow for the Admin to easily create anything.

Continuum GRC has native functionality for any type of form be created. Our Form Builder tools allow for the Admin to easily create anything.

Continuum GRC has native functionality for any type of form be created. Our Form Builder tools allow for the Admin to easily create anything.

Continuum GRC has native functionality for advanced data searches.

Continuum GRC has native functionality to export audit logs and many other data attributes to Excel.

Continuum GRC has native functionality to prevent the tampering with audit logs.

Continuum GRC has native functionality for workflows to include audit actions to forms and modules. If this requirement is to add to the system audit logging, that would require a development ticket.

Continuum GRC has native functionality in the Form Builder tooling for this requirement.

Continuum GRC has native functionality in the Form Builder tooling for this requirement.

Continuum GRC has native functionality for assigning scores to our color pallet.

Continuum GRC has native functionality for role based access to address this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality for certain bulk actions. More information is needed to better define this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality to easily assign roles.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Access Manager for this requirement.

Continuum GRC has native functionality in the Form Builder tooling for this requirement.

Continuum GRC has native functionality for notification logic, triggers, and workflows.

Continuum GRC has native functionality for this requirement.

Continuum GRC has native functionality for advanced data searches.

Continuum GRC has native functionality for setting timeouts by the site administrator.

Continuum GRC has native functionality for scoring a single element within a range of -999 up to 999 with color pallet based on score. This provides options for this requirement.

Continuum GRC has native functionality for Auto Mapping between standards. This also includes custom modules created by site Admins.

Continuum GRC has native functionality for supporting all of the aforementioned standards and hundreds more. Additionally, all of our standards auto map meaning the systems exponentially save work and prevents human error.

Continuum GRC has native functionality for displaying these metrics in dashboards and report outputs.

Continuum GRC has native functionality for Policy and Document management in the system. The full life-cycle inside the system. System outputs and integrations allow for publishing to external systems.

Continuum GRC has native functionality for Admins to design their own forms and apply their own scores easily.

Continuum GRC has native functionality for logic driven forms, scores, and workflows to be established by the site Admin.

Continuum GRC has native functionality for from driven workflows that support this requirement.

Continuum GRC has native functionality for all of these requirements. Form driven workflows and document and report generation are all fundamental features.

Continuum GRC has native functionality for designing form that directly associate evidence and policies to controls. This is simple functionality integral to the system.

Continuum GRC has native functionality as a form driven system. Every form regardless if it is from our inventory or designed by the site admin has the capability to capture this requirement.

Continuum GRC has native functionality for auto mapping between frameworks in real time. Every framework in our inventory does this without any additional configuration work. Also, an admin can use our form building tools to create something proprietary and have it also leverage auto mapping between frameworks and forms.

Continuum GRC has native functionality for hundreds of dashboard reports from the micro to the macro that all update in real time.

Continuum GRC has native functionality for providing several system indications, dashboards, logic notifications and reports that are all role based assigned.

Continuum GRC has native functionality for displaying executive dashboards, summary reports, summary notifications and a plethora more.

Continuum GRC has native functionality for an Entity which is a grouping of resources and users that may be many layers and many separations.

Continuum GRC has native functionality for any process driven, form driven requirement and leverage a full suite of automation tools. This requirement may be easily created using integrated form builder drag-n-drop ease.

Continuum GRC has native functionality for any process driven, form driven requirement and leverage a full suite of automation tools. This requirement may be easily created using integrated form builder drag-n-drop ease.

Continuum GRC has native functionality for any process driven, form driven requirement and leverage a full suite of automation tools. This requirement may be easily created using integrated form builder drag-n-drop ease.

Continuum GRC has native functionality for any framework. We provide many pre-configured modules in our inventory. We also support all others including proprietary ones. This requirement may be easily created using integrated form builder drag-n-drop ease.

The Continuum GRC FedRAMP Authorized Package ID is FR1915750265 and contains additional information regarding our data retention and preservation implementations. The Agency may use the FedRAMP Package Access Request Form to review the full FedRAMP Authorization details.

Easily import external data sources through our patent pending Dynamic Integrator functionality, through custom API integrators, and through our OpenAPI capabilities which suit most data transactions between external systems, legacy systems, and even raw inputs.

Create hundreds of dashboards and reports with many popular pre-built dashboards, but also end-user-defined reports that may be focused on the macro-level down to the micro-level.

Easily import external data sources through our patent pending Dynamic Integrator functionality, through custom API integrators, and through our OpenAPI capabilities which suit most data transactions between external systems, legacy systems, and even raw inputs.

The Continuum GRC SaaS solution provides the Status Indicator report feature allowing for easy progress reporting.Ability to export documents. The Continuum GRC SaaS solution provides extensive project management features to report on and track project phases and success metrics along the way. Utilizing features such as real-time Gantt charts, Action ITAM reporting, Status Indicators and other tools to address this requirement.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards. Continuum GRC has native functionality for certain bulk actions. More information is needed to better define this requirement.

The Continuum GRC SaaS solution has a variety of workflow tools designed to interface with multiple entry points within a project workflow. These can be as simple as Approval-Deny by designated examiners, to hype-granular event logic driven workflow rules that are created easily with Boolean logic simplicity. The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarded. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC SaaS solution has native reporting outputs that include Word, Excel, PDF, CSV and text formats all of which are easily updated.

Easily import external data sources through our patent pending Dynamic Integrator functionality, through custom API integrators, and through our OpenAPI capabilities which suit most data transactions between external systems, legacy systems, and even raw inputs.

Evaluation of controls utilizes the Status Indicator feature updaging real-time dashboards and workflows.

Continuum GRC has native functionality for scheduled and on-demand reporting, hundreds of real-time dashboards are available.

Continuum GRC has native functionality for users to create, update, and maintain system security plan documentation.

Utilize the Continuum GRC's patent pending A.ITAM feature to provide user prompts accelerating the technical writing and document production of documents such as the SSP. Evaluation of controls utilizes the Status Indicator feature updating real-time dashboards and workflows.

Utilize the Continuum GRC's patent pending A.ITAM feature to provide user prompts accelerating the technical writing and document production of documents such as the SSP.

The Continuum GRC solution has the capability to provide predetermined helper text and citations. The entry points are through form element helper text parameters, form logic responses, and integrations from external systems.

Continuum GRC has native functionality for auto mapping between frameworks in real time. Every framework in our inventory does this without any additional configuration work. Also, an admin can use our form building tools to create something proprietary and have it also leverage auto mapping between frameworks and forms.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability.

Continuum GRC has native functionality for auto mapping between frameworks to include control inheritance in real time. Every framework in our inventory does this without any additional configuration work. Also, an admin can use our form building tools to create something proprietary and have it also leverage auto mapping between frameworks and forms.

The Continuum GRC SaaS solution provides a versioning feature that would allow for the segregation of report versions easily. Additionally, the Status Indicator report allows for separate reporting on all versions of the project report.

The Continuum GRC solution has the native capability to create and manage the customary two-tabbed spreadsheet POA&M report and manage it within the POA&M module.

The Continuum GRC solution has the native capability to create and manage the customary two-tabbed spreadsheet POA&M report and manage it within the POA&M module.

The solution must provide clear and easy-to-understand built-in reports that will add value to the incident response process. Create workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a Cryptographic Chain-of-Custody Evidence Management capability that associates system documents and all files in the system with a specific system user. All Continuum GRC form-questionnaire-modules have document production capabilities with outputs such as Word, Excel, PDF, and other document outputs. The Document Manager within the system allows for customary document and file management features. The Template Manager allows for rich-text document creation and management capabilities for Rapid Document Generation, Digital Signatures, Change Detection Indicators, OSCAL, Multipart Excel, Word, CSV Spreadsheet, PDF, and TXT Document Output (POA&M, SSP, etc.).

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC solution is robust and conforms to this generally however the volume of data selected as well as the end users network speed and endpoint processing power will impact page load times. The latter two are the responsibility of the end user.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC SaaS solutions projects, forms, questionnaires, datasets, evidentiary files, reports, and records all have unique identifiers. Additionally, the Record ID feature is a ticketing system feature allowing with unique identifiers for ticketing purposes.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC SaaS solutions projects, forms, questionnaires, datasets, evidentiary files, reports, and records all have unique identifiers. Additionally, the Record ID feature is a ticketing system feature allowing with unique identifiers for ticketing purposes.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

Continuum GRC has native functionality for auto mapping between control requirements and this includes status and risk.

Continuum GRC has auto-mapped the world's standards and frameworks seamlessly together. These are the most requested modules, but certainly not our entire inventory. FedRAMP, StateRAMP, EUCS, PCI ROC & SAQ, SSAE 18 SOC 1, & SOC 2, CONMON, POA&M, CSF, CJIS, DFARS NIST 800-171, CMMC, C5, ISO 27001, 27005, 27017, 27018, 17020, 17021, 17025, 17065, HIPAA NIST 800-66, NIST 800-53, NERC CIP & 693, COSO, SEC, NFA, & FINRA, CIS, CTPAT, Cyber Essentials, FDA 21, FIPS 199, NIST 800-30, NIST 800-37, COSO ERM, Third-Party Risk Assessments, Vendor Risk Assessments, Physical Security Risk Assessments, Site Visit Risk Assessments, GDPR, CCPA, DPIA and more. The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create any framework requirement with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC SaaS solution provides a drag-and-drop easy form builder tool to completely customize any form, questionnaire, or module.

All Continuum GRC form-questionnaire-modules have document production capabilities with outputs such as Word, Excel, PDF, and other document outputs. The Document Manager within the system allows for customary document and file management features.

Continuum GRC has native functionality for displaying risk scores and heatmap style dashboards making it easy to focus on risk priorities.

Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarded. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarded. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS. Leverage homegrown or our current Third-Party Risk Assessments, Vendor Risk Assessments, Physical Security Risk Assessments, Site Visit Risk Assessments, DPIA and more.

Continuum GRC has native functionality for workflows, notification logic, and schedulers are included. Continuum GRC has native functionality for scheduled and on-demand reporting, hundreds of real-time dashboards are available.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS. Leverage homegrown or our current Third-Party Risk Assessments, Vendor Risk Assessments, Physical Security Risk Assessments, Site Visit Risk Assessments, DPIA and more.

Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Continuum GRC has native functionality for a multitude of workflow triggers to notify, schedule, update, and more.

Continuum GRC has native functionality for providing several system indications, dashboards, logic notifications and reports that are all role based assigned.

Continuum GRC has native functionality for the creation of any type of form. Our Risk Registry module accomplishes this, but may also be modified without coding.

All Continuum GRC form-questionnaire-modules have document production capabilities with outputs such as Word, Excel, PDF, and other document outputs. The Document Manager within the system allows for customary document and file management features.

The Continuum GRC SaaS solution has a native drag-n-drop form builder tool that allows administrators to easily create any number or type of form templates the organization requires.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC FedRAMP Authorized SaaS solution has native functionality to establish any type of selection criteria using our easy to use, drag-n-drop form creation tooling to satisfy this requirement.

The Continuum GRC FedRAMP Authorized SaaS solution has native functionality to establish any type of selection criteria using our easy to use, drag-n-drop form creation tooling to satisfy this requirement.

Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting.

The Continuum GRC FedRAMP Authorized SaaS solution has native functionality to establish any type of selection criteria using our easy to use, drag-n-drop form creation tooling to satisfy this requirement.

Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting.

Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting.

The Continuum GRC FedRAMP Authorized SaaS solution has native functionality to establish any type of selection criteria using our easy to use, drag-n-drop form creation tooling to satisfy this requirement.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability.

The Continuum GRC SaaS solution has a central records management feature allowing for management, versioning, and restoration if needed.

Continuum GRC has native functionality for logic driven forms, scores, and workflows to be established by the site Admin. Delegated respondents are able to modify risk or compliance status selections that trigger automated updates to scores, reports, and dashboards in real-time.

Continuum GRC has native functionality for logic driven forms, scores, and workflows to be established by the site Admin. Delegated respondents are able to modify risk or compliance status selections that trigger automated updates to scores, reports, and dashboards in real-time.

The Continuum GRC FedRAMP Authorized SaaS solution has native functionality to establish any type of selection criteria using our easy to use, drag-n-drop form creation tooling to satisfy this requirement.

The Continuum GRC FedRAMP Authorized SaaS solution has native functionality to establish any type of selection criteria using our easy to use, drag-n-drop form creation tooling to satisfy this requirement.

The Continuum GRC SaaS solution has a native drag-n-drop form builder tool that allows administrators to easily create any number or type of form templates the organization requires.

Continuum GRC has native functionality for logic driven forms, scores, and workflows to be established by the site Admin. Use our form logic to create intuitive response driven forms, reports, and dashboards.

Continuum GRC has native functionality for workflows, notification logic, and schedulers are included.

Continuum GRC has native functionality for workflows, notification logic, and schedulers are included.

Continuum GRC has native functionality for workflows, notification logic, and schedulers are included.

Continuum GRC has native functionality for scheduled and on-demand reporting, hundreds of real-time dashboards are available.

Continuum GRC has native functionality for form availability scheduling that will close access off to responsible parties using simple date driven rules.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

Continuum GRC has native functionality provides response and input automation for alerting and displaying compliance status, risk scoring, and assessor validation status.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides FIPS 140-2 validated encryption for file systems, databases, sessions, and all integration interoperability. Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

Continuum GRC has native functionality provides response and input automation for alerting and displaying compliance status, risk scoring, and assessor validation status.

The Continuum GRC solutions integrations provide support for both schedule driven and real-time data exchanges with authorized systems.

Continuum GRC has native functionality for auto mapping between frameworks in real time. Every framework in our inventory does this without any additional configuration work. Also, an admin can use our form building tools to create something proprietary and have it also leverage auto mapping between frameworks and forms. Continuum GRC has native functionality for auto mapping between control requirements and this includes status and risk.

Continuum GRC has native functionality for all types of responsibility delegations, reporting, and dashboarding. Additionally, our drag-n-drop form builder tooling makes it easy to adapt forms to any requirement.

Continuum GRC has native functionality for all types of responsibility delegations, reporting, and dashboarding. Additionally, our drag-n-drop form builder tooling makes it easy to adapt forms to any requirement.

The Continuum GRC SaaS solution is designed to facilitate large audit groups, large datasets with any variety of form fields, audit templates and any other form of bespoke requirement requiring form driven assessments. Continuum GRC has native functionality as a form driven system. Every form regardless if it is from our inventory or designed by the site admin has the capability to capture this requirement.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides familiar form-questionnaire-module style inputs for the collection, maintenance, management, and analysis of risk assessment datasets. Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides familiar form-questionnaire-module style inputs for the collection, maintenance, management, and analysis of risk assessment datasets. Our popular two-click navigation Risk Heatmaps take you to your priority requirements quickly. Review dashboards such as the Consolidated Executive Review, Compliance Status, Risk Rating, Maturity Rating, Task and Deliverable Reports, Gap Reports, and Timeline Performance with Real-Time Charts, Graphs, and Maps. Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

The Continuum GRC SaaS solution provides a patent pending feature referred to as Nest Entities allowing for the cross-entity or cross-dataset viewing and reporting of projects.

The Continuum GRC SaaS solution provides extensive project management features to report on and track project phases and success metrics along the way. Utilizing features such as real-time Gantt charts, Action ITAM reporting, Status Indicators and other tools to address this requirement.

The Continuum GRC SaaS solution provides a drag-and-drop easy form builder tool to completely customize any form, questionnaire, or module.anges visually to alert reviewers of any change that may have occurred after a review.

The Continuum GRC SaaS solution provides a patent pending feature referred to as Nest Entities allowing for the cross-entity or cross-dataset viewing and reporting of projects.

The Continuum GRC SaaS solution provides the Status Indicator feature that automatically changes visually to alert reviewers of any change that may have occurred after a review. The Status Indicator report allows for dashboards and a variety of change reports.

The Continuum GRC SaaS solution provides a patent pending feature referred to as Nest Entities allowing for the cross-entity or cross-dataset viewing and reporting of projects.

Continuum GRC has native functionality for scheduled and on-demand reporting, hundreds of real-time dashboards are available.

Continuum GRC has native functionality for displaying risk across many entities, areas, or other grouping based display requirements.

The Continuum GRC SaaS solution provides a patent pending feature referred to as Nest Entities allowing for the cross-entity or cross-dataset viewing and reporting of projects.

The Continuum GRC SaaS solution provides a patent pending feature referred to as Nest Entities allowing for the cross-entity or cross-dataset viewing and reporting of projects.

The Continuum GRC SaaS solution is a zero-trust system that requires administrators to establish roles with granular permissions. The Entity container sets up groups that keep data separate. Users, Examiners and Administrators will have the access determined by designated Administrators.

Customize your risk assessments with flexible 999 to -999 Automatic Scores and Calculations, Micro and Macro Reporting Graphics, and Real-Time Dashboards. And Boolean Data Trigger Logic Reporting. Continuum GRC has native functionality for scoring a single element within a range of -999 up to 999 with color pallet assignments based on score.

Testing systems may be included in your Continuum GRC solution.

Continuum GRC has native functionality for the creation of any type of form. Our Risk Registry module accomplishes this, but may also be modified without coding.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

Continuum GRC uses the U.S. Web Design System (USWDS) maturity model to deliver a great digital experience and to be in compliance with the website standards of the Technology Transformation Services of the General Services Administration.

The Continuum GRC SaaS solution provides excellent 508 compliance. There are no known limitations with this requirement. Our VPAT 2.5 report is excellent.

The Continuum GRC SaaS solution allows for the embedded rendering and display of artifacts in common formats such as JPG, PNG, GIF, BMP, TIF, WEBP, SVG, DOC/DOCX, ODT, XLS/XLSX, ODS, PPT/PPTX, ODP, TXT, PDF without downloading or use of external tooling within the solutions file viewer feature helping to prevent data leakage.

The Continuum GRC SaaS solution allows for the review of OSCAL security

authorization documents and comment on each component (e.g. individual security controls, services, or system component) of the documentation.

The Continuum GRC SaaS solution allows for access to documentation and data to facilitate concurrent, editing, commenting and viewing by multiple users. Additionally using our socket technology, users will not overwrite each other’s work while providing visibility to others of the activities that first user in real time.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC SaaS solution allows for the ability to generate and develop knowledge base articles based on common challenges experienced by users or deliverables that are like ticketing functionality. The integral RBAC views to knowledge base articles to support self remediation of issues is native functionality. Additionally, Continuum GRC’s company site provides an FAQ as an alternative.

Continuum GRC has native functionality for role-based delegation to all system resources.

The Continuum GRC SaaS solution is purpose-built for managing multi-team and multi-user projects. Integral to the solution are features such as the Action ITAM designed for workflow questions, requests, comments, project notes, suspense dates, accountability reporting and other powerful features to satisfy this requirement.

The ACTION ITAM report is designed for this requirement.

Task scheduling is and task timing is native functionality. Also, the ACTION ITAM report is designed for this requirement.

The Status Indicator is native functionality designed for this purpose.

Versioning is native functionality, but side-by-side version comparison is not current functionality.

The ACTION ITAM report is designed for this requirement. Also the Status Indicator and form logic features improve change tracking.

Report conversions to PDF is native functionality.

The Continuum GRC SaaS provides many ready-made reporting dashboards that dynamically update. Our reporting dashboards have hundreds of options that allows for extreme granularity of reporting options.

Continuum GRC has native functionality for displaying these metrics in dashboards and report outputs.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create any framework requirement with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC SaaS solution has a central records management feature allowing for management, versioning, and restoration if needed. Additionally, custom reporting forms may be created for addressing this requirement.

Once the automated integration inputs data into the systems intake forms-questionnaires-modules then the logic trigger functionality takes over. System administrators establish simple Boolean rules to trigger events and provide real-time alerts, notifications, reports, and dashboards keeping users informed and up to date.

The Continuum GRC SaaS solution has a central document management feature allowing for common file management capabilities. This upload, update, replace or delete capability is also integral to all modules File Upload form element inside existing or custom modules.

The Continuum GRC SaaS solution requires multi-factor authentication. Additionally, our SAML integration feature allows for the connection to internal or external SP-IDP systems that support CAC PIV, SSO, AD and a any SAML-compliant solution to other authentication management systems.

The Continuum GRC SaaS solution is a role-based system and administrators provision access to any project or resources in the system. Continuum GRC has native functionality for role-based access and delegations.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities.

Our OpenAPI conformity means that hundreds of solutions have integration opportunities with Continuum GRC. Those solution providers that utilize proprietary API requirements, will require that Continuum GRC creates these specialized applications and provide them to all customers. These custom requirements typically require about 1-2 months for development, testing, and production roll-out. Utilization of Continuum GRC OpenAPI connections takes minutes to define the connection parameters in our easy-to-use questionnaire forms.

The Continuum GRC SaaS solution allows through a variety of API-driven connections to fetch data from defined endpoints. Once fetched, the site administrator will decide what processes, forms, and automations should be applied to derive value from that raw data.

The Continuum GRC SaaS solution provides a feature for tagging of datasets with identifiers. Additionally, native document functionality allows for the inclusion of metadata which is supported by the file management capabilities of the system.

The Continuum GRC SaaS solution allows for the processes and activities performed on data to manipulate, analyze, transform, store, retrieve, and manage it effectively. These operations can include data entry, validation, cleaning, transformation, integration, aggregation, querying, reporting, and visualization, among others, to ensure that data is accurate, consistent, and accessible for decision-making and analysis purposes creating value from data by making it useful and meaningful for organizations and individuals.

Utilize the Continuum GRC's patent pending A.ITAM feature to provide user prompts accelerating the technical writing and document production of documents such as the SSP.

The Continuum GRC SaaS solution provides native functionality for notification triggers, rules and workflow events which are defined by administrators. System administrators establish simple Boolean rules to trigger events and provide real-time alerts, notifications, reports, and dashboards keeping users informed and up to date.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities.

The Continuum GRC SaaS solution allows for the management of large datasets and file artifacts inside the solution negating the need for external repositories. The Continuum GRC SaaS solution has a central document management feature allowing for full policy management, versioning, and inclusions as evidence if needed. All files in the system are protected by FIPS 140-2 validated encryption inside a private chain of custody system.

Create hundreds of dashboards and reports with many popular pre-built dashboards, but also end-user-defined reports that may be focused on the macro-level down to the micro-level.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides extensive on-board reporting and audit logging features all of which may be sent to external integrated applications. The Continuum GRC SaaS solution maintains real-time audit logs on all users to be analyzed as needed by administrators and examiners. These reports may also be exportable for further analysis. No one has the ability to alter these records.

The Continuum GRC SaaS solution provides a full-featured file attachment management system. Utilizing versioning, archiving, and duplication, the ability to retain or recover attachments is native functionality. The solution provides a data retention feature to automatically purge dataset on a fixed schedule if needed. There is also a system recycling feature that allows for the full restoration of project data and attachments for up to 30 days.

The Continuum GRC SaaS solution allows for the creation of an infinite variety of modules, reports, workflows, and integrations. The Open-API compliance of the system supplants the need for an SDK.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities.

The Continuum GRC solutions integrations provide support for both schedule driven and real-time data exchanges with authorized systems.

The Continuum GRC SaaS solution provides a versioning feature that would allow for the segregation of report versions easily. Additionally, the Status Indicator report allows for separate reporting on all versions of the project report.

The Continuum GRC SaaS solution allows for the cross examination of this generic requirement primarily through dynamic real-time dashboards.

All Continuum GRC form-questionnaire-modules have document production capabilities with outputs such as Word, Excel, PDF, and other document outputs. The Document Manager within the system allows for customary document and file management features. The Template Manager allows for rich-text document creation and management capabilities for Rapid Document Generation, Digital Signatures, Change Detection Indicators, OSCAL, Multipart Excel, Word, CSV Spreadsheet, PDF, and TXT Document Output (POA&M, SSP, etc.).

Continuum GRC has native functionality provides response and input automation for alerting and displaying compliance status, risk scoring, and assessor validation status.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a Cryptographic Chain-of-Custody Evidence Management capability that associates system documents and all files in the system with a specific system user.

The Continuum GRC SaaS solution has a central document management feature allowing for full policy management, versioning, and inclusions as evidence if needed. All files in the system are protected by FIPS 140-2 validated encryption inside a private chain of custody system.

Continuum GRC has native functionality for the creation of any type of form. Once data populates the modules in the system, cataloging is possible as defined by the system administrator.

Continuum GRC allows for raw data to be ingested from various data sources and then ported to data store, like a data lake or data warehouse, for analysis.

The Continuum GRC SaaS solution has a central document management feature allowing for full document management, versioning, and inclusions as evidence if needed. All files in the system are protected by FIPS 140-2 validated encryption inside a private chain of custody system.

The Continuum GRC SaaS solution allows through a variety of API-driven connections to fetch data from defined endpoints. Once fetched, the site administrator will decide what processes, forms, and automations should be applied to derive value from that raw data.

The Continuum GRC SaaS solution allows through a variety of API-driven connections to fetch or push data from defined endpoints. Once processed, the site administrator will decide what workflows, forms, and automations should be applied to derive value from that raw data.

Utilize the Continuum GRC's patent pending A.ITAM feature to provide user prompts accelerating the technical writing and document production of documents such as the SSP. Evaluation of controls utilizes the Status Indicator feature updating real-time dashboards and workflows. Additionally, through our integration capability to external Machine Learning Operations applications, the end-to-end process and infrastructure for developing, deploying, monitoring, and managing machine learning models in production environments is available.

Create hundreds of dashboards and reports with many popular pre-built dashboards, but also end-user-defined reports that may be focused on the macro-level down to the micro-level.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides extensive on-board reporting features all of which may be sent to external integrated applications. Create hundreds of dashboards and reports with many popular pre-built dashboards, but also end-user-defined reports that may be focused on the macro-level down to the micro-level. Our patent-pending Nested Entities and Crossview risk heatmaps give users a high-level graphical understanding of risk and compliance inside the organization and across multiple teams and organizations all from within the Continuum GRC SaaS. Analyze automatic scorecards, calculations, real-time dashboards, cross-dataset reporting, dashboards, and analysis views.

Utilize the Continuum GRC's patent pending A.ITAM feature to provide user prompts accelerating the technical writing and document production of documents such as the SSP. Evaluation of controls utilizes the Status Indicator feature updating real-time dashboards and workflows. Additionally, through our integration capability to external Machine Learning Operations applications, the end-to-end process and infrastructure for developing, deploying, monitoring, and managing machine learning models in production environments is available.

The Continuum GRC solution allows for system administrators to determine what custom validations occur through the drag-n-drop module creation tooling.

The Continuum GRC solution allows for system administrators to determine what custom validations occur through the drag-n-drop module creation tooling.

The Continuum GRC solution allows for system administrators to determine what custom form logic actions are required and Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarding. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

Continuum GRC has native functionality for workflows, notification logic, and schedulers are included. Task scheduling is and task timing is native functionality. Also, the ACTION ITAM report is designed for this requirement.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarding. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module workflows that may be delegated, monitored, reported, and dashboarding. Extensive audit logging allows for performance monitoring of system resources and system users. Boolean logic features allow for precise rule creation to alert the designated team members and transfer the right data points to additional forms, reports, dashboards, external integrations, and many other user-defined workflows.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create an incident response workflow with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

Once the automated integration inputs data into the systems intake forms-questionnaires-modules then the logic trigger functionality takes over. System administrators establish simple Boolean rules to trigger events and provide real-time alerts, notifications, reports, and dashboards keeping users informed and up to date.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create any framework requirement with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create any framework requirement with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides the Action ITAM and Status Indicator features that make it easy to identify exceptions, document exceptions, assign to one or more responsible users, notify all assigned and responsible parties, display through user-specific Priority Dashboards and consolidated team Action ITAM reports and Status Indicator reports making it easy to identify priorities and accountability. Go even further with our patent-pending Nested Entities and Crossview risk heatmaps giving users a high-level graphical understanding of risk and compliance inside the organization, and across multiple teams and organizations all from within the Continuum GRC SaaS.

The Continuum GRC SaaS solution is purpose-built for managing multi-team and multi-user projects. Integral to the system is an anti-collision capability that prevents users from “stepping on each other’s toes” utilizing our socket technology. Other users can see in real-time who is updating a form field and when they are completed.

The Continuum GRC SaaS solution provides the Action ITAM feature allowing for collaborative commentary. Only administrators may delete these conversations.

Create alert-driven workflows with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

Continuum GRC has native functionality for auto mapping between frameworks to include control inheritance in real time. Every framework in our inventory does this without any additional configuration work. Also, an admin can use our form building tools to create something proprietary and have it also leverage auto mapping between frameworks and forms.

Continuum GRC has native functionality for auto mapping between frameworks to include control inheritance in real time. Every framework in our inventory does this without any additional configuration work. Also, an admin can use our form building tools to create something proprietary and have it also leverage auto mapping between frameworks and forms.

The Continuum GRC administrator may design modules that automatically score and categorize depending on the requirement needed. Using form logic allows additional show-hide-skip capabilities administrators can use to create intuitive and meaningful experiences for system respondents.

The Continuum GRC administrator may design modules that automatically score and dashboard display alerts and notifications depending on the requirement needed. Using form logic allows additional show-hide-skip capabilities triggered on module sections made by end users that administrators can use to create intuitive and meaningful experiences for system respondents.

Each Continuum GRC module allows for the auto-mapping of vulnerabilities to controls. The administrator will need to determine what the relationship needs to be and then associate it with the control. Professional services are recommended to implement this native but complex requirement.

This requirement would function just like all other form-driven processes but with the specific purpose of the deviation request process. Continuum GRC has native functionality for displaying executive dashboards, summary reports, summary notifications and a plethora more.

Continuum GRC has native functionality for any process driven, form driven requirement and leverage a full suite of automation tools. This requirement may be easily created using integrated form builder drag-n-drop ease.

All Continuum GRC modules allows for the addition, deletion, and rearrangement of security controls with drag-n-drop ease.

Continuum GRC has native functionality for scheduled and on-demand reporting, hundreds of real-time dashboards are available.

This requirement is functionally no different than any other assessment module and workflows. Utilize workflow schedulers and form logic to keep updated and notified.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a flexible licensing model that is ala carte and allows organizations to grow with the platform. Continuum GRC is a modular solution. First, select a hosting option. Organizations with Federal and or CUI data will need FedRAMP Authorized AWS GovCloud hosting, otherwise, AWS hosting is just right. Deployment typically is between 2-24-Hours for a fully operational system. Second, select the access options you need. How many administrators, examiners, users, and entity groups do you need? Provisioning these takes just minutes within the Continuum GRC Access Control portal. Finally, what modules within the categories of Audit & Compliance Frameworks Modules, Risk Assessment & Management Modules, Governance & Policy Development Modules, and any Custom created modules does your organization need? These are deployed in just minutes for stock inventory modules. Custom-created modules are projects planned with an organization but typically take a few days to a week or so for most deliverables.

Continuum GRC standard support options include 24/7 Online Continuum GRC Service Manager is available to all subscribers, 24/7 Call +1 (888) 896-6207 for Continuum GRC customer service, 24/7 Online Continuum GRC knowledge base for all subscribers, 24/7 Online Continuum GRC Administration Manual for all subscribers with dedicated hosting, 24/7 Dedicated Service Agent for all subscribers with dedicated hosting, and 24/7 Custom Service Level Agreements (SLA) available with dedicated hosting agreements available which would include a 4-Hour response time if required.

The Continuum GRC SaaS solution allows for the ability to generate and develop knowledge base articles based on common challenges experienced by users or deliverables that are like ticketing functionality. The integral RBAC views to knowledge base articles to support self-remediation of issues is native functionality. Additionally, Continuum GRC’s company site provides an FAQ as an alternative.

Continuum GRC provides detailed configuration to parties that obtain our Package ID is FR1915750265. The Agency may use the FedRAMP Package Access Request Form to review the full FedRAMP Authorization details.

Continuum GRC does not publish a roadmap to the public due to the unique intellectual property created which would be valuable to competitors. We do however share our roadmap with customers who are under NDA.

Continuum GRC provides all of the ecosystem operational support and maintenance as a regular part of customer support. Additional professional support services and administration support are available as options. Additionally, there is a 24/7 Online Continuum GRC Administration Manual for all subscribers with dedicated hosting. Continuum GRC provides 24/7 support to customers through a variety of methods such as telephone, email, and online customer portals. There is an extensive online manual available to all users.

The Continuum GRC SaaS solution is a role-based system and administrators provision access to any project or resources in the system.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides form-questionnaire-module creation tools that are drag-and-drop and easy to use. Create C-SCRM workflows with custom alerts, notifications, dashboards, and response-driven intake processes conforming to the organization’s requirements while enhancing the requirements with intelligent automation, reporting, workflows, and dashboards.

The Continuum GRC SaaS solution requires multi-factor authentication. Additionally, our SAML integration feature allows for the connection to internal or external SP-IDP systems that support CAC PIV, SSO, AD and a any SAML-compliant solution to other authentication management systems.

The Continuum GRC SaaS solution requires multi-factor authentication. Additionally, our SAML integration feature allows for the connection to internal or external SP-IDP systems that support CAC PIV, SSO, AD and a any SAML-compliant solution to other authentication management systems.

The Continuum GRC SaaS solutions projects, forms, questionnaires, datasets, evidentiary files, reports, and records all have unique identifiers. Additionally, the Record ID feature is a ticketing system feature allowing with unique identifiers for ticketing purposes.

The Continuum GRC SaaS solution provides digital signature capabilities within the system to include any number of signatories.

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides a Cryptographic Chain-of-Custody Evidence Management capability that associates system documents and all files in the system with a specific system user. Additionally, every module within the Continuum GRC is designed for data entry and date management.

The Continuum GRC modules with existing linked resources remain available as do client introduced resources. Search capabilities provide users with the identification and searchable tools that improve the user experience.

The Continuum GRC maintains a rolling three-year product roadmap with no End of Life defined. We are a privately owned sole-source provider and have no external debt or outside investors. We are only beholden to our customers to provide the best long-term solutions. All customers have the option of selecting separate test environments if optioned.

Continuum GRC provides all of the ecosystem operational support and maintenance as a regular part of customer support. Additional professi

The Continuum GRC FedRAMP Authorized SaaS solution in the GovCloud provides feature-rich interfaces through pre-built integrations, form-questionnaire-module customizations, templated variables, parameter values, data webhook rules enabling logic triggers, and custom notification rules. Use HTTP Authentication, Custom HTTP Headers, Data Formatting, Key-Value Pairs, Raw Data, and other API-driven capabilities. Additionally, our dynamic data import tool allows for the importation and automatic form-questionnaire-module building creation to migrate from legacy applications into the automated power of Continuum GRC. Easily import external data sources through our patent pending Dynamic Integrator functionality, through custom API integrators, and through our OpenAPI capabilities which suit most data transactions between external systems, legacy systems, and even raw inputs.

Continuum GRC prefers Docker for this requirement. This is leveraged for improved service rollouts.

Continuum GRC development involves code to automate the provisioning, configuration, and management of system resources allowing for the consistency, repeatability, and faster recovery from failures. Our practice reduces the possibility of human error in configuration management, leading to higher reliability. Additionally, since our configuration is managed as code, it is version controlled, enabling easy tracking of changes and rollback if necessary.

Continuum GRC prefers Docker for this requirement. This is leveraged for improved service rollouts.

Continuum GRC employs an iterative and collaborative approaches to software development that prioritize flexibility, adaptability, and customer satisfaction which involves breaking down the development process into smaller, manageable increments or iterations, each typically lasting a few weeks.

As a FedRAMP authorized SaaS solution, Continuum GRC provides a software inventory and will continue to do so.

The Document Manager within the system allows for customary document and file management features. The Template Manager allows for rich-text document creation and management capabilities for Rapid Document Generation, Digital Signatures, Change Detection Indicators, OSCAL, Multipart Excel, Word, CSV Spreadsheet, PDF, and TXT Document Output (POA&M, SSP, etc.).

As OSCAL validation matures, Continuum GRC will maintain our adherence to the standard. The system is currently fully compliant.

As OSCAL validation matures, Continuum GRC will maintain our adherence to the standard. The system is currently fully compliant.

The Template Manager allows for rich-text document creation and management capabilities without the need for crude CLI interfaces.