Enfore Gained Complete Compliance Insight
Enfore developed a comprehensive view of their GRC program with StandardFusion, enabling ISO compliance, centralized control management, and streamlined audit processes.
The Challenge
Enfore leveraged various tools for information security and privacy but hadn't yet implemented a dedicated solution for governance, risk management, and compliance with different laws and industry regulations, including ISO standards. The team at enfore had to shape their previous tool into a risk and governance program to perform calculations manually along with spreadsheets. Yves-Philippe Rentsch, Director of Certification, had recently joined the organization and began searching for a software solution as they were missing a fundamental approach with their current use of spreadsheets, which was unsustainable. Experiencing rapid growth, they also needed a solution to actively reduce risk and give them an overall look into exposures and attack vendors.
"I'm still madly in love with the tool and have referred StandardFusion to others. I feel like a valued customer when I have a question, answers come back in next to no time"
Yves-Philippe, Rentsch
Director of Certification
At
enfore
The Solution
Yves evaluated multiple solutions, some were cost-prohibitive, and others didn't satisfy enfore's GRC needs, particularly their risk management. "I was looking for different products and discovered StandardFusion, it seemed to have a good look and feel and was also browser-based. I was concerned about our data being collected in the United States, so the fact that StandardFusion was based in Canada and ran instances in Europe for European customers was critical." - Yves-Philippe Rentsch, Director of Certification, enfore StandardFusion's GRC platform enables users to centralize their controls and breaks down standards requirement by requirement, allowing users to connect individual requirements to their organization's unique controls. This was another aspect enfore was looking for to help simplify their compliance efforts.
