MyVCM

Who Uses MyVCM?

Small and midsize organizations from 10's of employees to thousands who need to demonstrate compliance with security standards internally and externally.

What Is MyVCM?

Ostendio MyVCM is an Integrated Risk Management Platform that makes it easier to build, operate and showcase your security program. Unlike combining multiple point tools, documents, and spreadsheets, Ostendio provides a single solution that incorporates users and requirements across the entire enterprise. Consider MyVCM if you need to demonstrate compliance to security standards and regulations to your customers, employees, auditors or partners.

MyVCM Details

Ostendio

http://ostendio.com

Founded 2013

MyVCM Software - 1
MyVCM Software - Cross-walk standards
MyVCM Software - MyVCM Premium content
MyVCM Software - 4
MyVCM video
Play
MyVCM Software - 1 - thumbnail
MyVCM Software - Cross-walk standards - thumbnail
MyVCM Software - MyVCM Premium content - thumbnail
MyVCM Software - 4 - thumbnail

Compare MyVCM with similar products

Starting price

US$199.50/month
US$600.00/year
N/A
N/A

Free Version

Free Version No
Free Version No
Free Version No
Free Version No

Free Trial

Free Trial No
Free Trial Yes
Free Trial No
Free Trial No

MyVCM deployment and support

Support

  • Email/Help Desk
  • Phone Support
  • Chat

Deployment

  • Cloud, SaaS, Web-based

Training

  • In Person
  • Live Online
  • Webinars
  • Documentation

MyVCM Features

  • API
  • Activity Dashboard
  • Activity Tracking
  • Alerts / Escalation
  • Alerts/Notifications
  • Approval Process Control
  • Archiving & Retention
  • Assessment Management
  • Asset Tracking
  • Audit Management
  • Audit Planning
  • Audit Trail
  • Change Management
  • Compliance Management
  • Configurable Workflow
  • Corrective and Preventive Actions (CAPA)
  • Customisable Forms
  • Customisable Reports
  • Customisable Templates
  • Dashboard
  • Dashboard Creation
  • Data Visualisation
  • Document Management
  • Document Storage
  • Forms Management
  • Incident Management
  • Inspection Management
  • Issue Management
  • Mobile Access
  • Monitoring
  • Offline Access
  • Policy Management
  • Real Time Analytics
  • Real Time Data
  • Real Time Monitoring
  • Real Time Notifications
  • Real Time Reporting
  • Reporting & Statistics
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Role-Based Permissions
  • Security Auditing
  • Status Tracking
  • Task Management
  • Template Management
  • Third Party Integrations
  • Training Management
  • Version Control
  • Workflow Management

View full list of Audit Software

  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Activity Tracking
  • Alerts / Escalation
  • Archiving & Retention
  • Assessment Management
  • Audit Management
  • Audit Trail
  • Compliance Management
  • Compliance Tracking
  • Configurable Workflow
  • Controls Audit
  • Corrective and Preventive Actions (CAPA)
  • Customisable Reports
  • Customisable Templates
  • Data Visualisation
  • Document Management
  • Document Storage
  • Environmental Compliance
  • FDA Compliance
  • Forms Management
  • HIPAA Compliant
  • ISO Compliance
  • Incident Management
  • Monitoring
  • Multi-Language
  • OSHA Compliance
  • Policy Management
  • Process/Workflow Automation
  • Real Time Data
  • Real Time Monitoring
  • Real Time Notifications
  • Real Time Reporting
  • Reminders
  • Reporting & Statistics
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Risk Management
  • Role-Based Permissions
  • Sarbanes-Oxley Compliance
  • Security Auditing
  • Surveys & Feedback
  • Task Management
  • Template Management
  • Third Party Integrations
  • Training Management
  • Version Control
  • Workflow Management

View full list of Compliance Software

  • API
  • Activity Dashboard
  • Activity Tracking
  • Alerts/Notifications
  • Approval Process Control
  • Archiving & Retention
  • Assessment Management
  • Audit Management
  • Audit Trail
  • Compliance Management
  • Configurable Workflow
  • Corrective and Preventive Actions (CAPA)
  • Customisable Reports
  • Customisable Templates
  • Dashboard Creation
  • Data Import/Export
  • Data Visualisation
  • Disaster Recovery
  • Document Management
  • Document Storage
  • Environmental Compliance
  • FDA Compliance
  • HIPAA Compliant
  • IT Risk Management
  • Incident Management
  • Internal Controls Management
  • Issue Management
  • Monitoring
  • Operational Risk Management
  • Policy Management
  • Real Time Monitoring
  • Real Time Reporting
  • Reminders
  • Reporting & Statistics
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Sarbanes-Oxley Compliance
  • Secure Data Storage
  • Security Auditing
  • Single Sign On
  • Summary Reports
  • Task Management
  • Third Party Integrations
  • Training Management
  • User Management
  • Vendor Management
  • Version Control
  • Visual Analytics
  • Workflow Management

View full list of GRC Software

  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Activity Tracking
  • Archiving & Retention
  • Assessment Management
  • Audit Management
  • Audit Trail
  • Collaboration Tools
  • Compliance Management
  • Compliance Tracking
  • Configurable Workflow
  • Customisable Forms
  • Customisable Reports
  • Customisable Templates
  • Data Import/Export
  • Data Security
  • Document Management
  • Document Storage
  • Document Templates
  • Documentation Management
  • Drag & Drop
  • For Healthcare
  • HIPAA Compliant
  • Incident Management
  • Monitoring
  • PCI Compliance
  • Policy Management
  • Policy Training
  • Real Time Reporting
  • Remediation Management
  • Reminders
  • Reporting & Statistics
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Risk Management
  • Sarbanes-Oxley Compliance
  • Search/Filter
  • Secure Data Storage
  • Security Auditing
  • Self Service Portal
  • Task Management
  • Third Party Integrations
  • Training Management
  • User Management
  • Vendor Management
  • Version Control
  • Vulnerability Scanning
  • Workflow Management

View full list of HIPAA Compliance Software

  • API
  • Access Controls/Permissions
  • Active Directory Integration
  • Activity Dashboard
  • Activity Tracking
  • Alerts / Escalation
  • Alerts/Notifications
  • Archiving & Retention
  • Assessment Management
  • Audit Management
  • Audit Trail
  • Compliance Management
  • Configurable Workflow
  • Customisable Reports
  • Dashboard
  • Dashboard Creation
  • Data Import/Export
  • Data Visualisation
  • Disaster Recovery
  • Document Management
  • Document Storage
  • Exceptions Management
  • FDA Compliance
  • Forms Management
  • HIPAA Compliant
  • IT Risk Management
  • Incident Management
  • Issue Management
  • KRI (Key Risk Indicator) Monitoring
  • Monitoring
  • Operational Risk Management
  • Performance Metrics
  • Policy Management
  • Predictive Analytics
  • Real Time Monitoring
  • Reporting & Statistics
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Role-Based Permissions
  • Safety Management
  • Sarbanes-Oxley Compliance
  • Secure Data Storage
  • Security Auditing
  • Single Sign On
  • Third Party Integrations
  • Training Management
  • Vendor Management
  • Version Control
  • Workflow Management

View full list of Integrated Risk Management Software

  • API
  • Activity Dashboard
  • Activity Tracking
  • Alerts / Escalation
  • Alerts/Notifications
  • Approval Process Control
  • Assessment Management
  • Audit Management
  • Audit Trail
  • Business Process Control
  • Compliance Management
  • Configurable Workflow
  • Corrective and Preventive Actions (CAPA)
  • Customisable Reports
  • Customisable Templates
  • Dashboard
  • Dashboard Creation
  • Data Visualisation
  • Document Management
  • Document Storage
  • Exceptions Management
  • Forms Management
  • IT Risk Management
  • Incident Management
  • Internal Controls Management
  • Legal Risk Management
  • Mobile Access
  • Monitoring
  • Operational Risk Management
  • Policy Management
  • Predictive Analytics
  • Real Time Monitoring
  • Real Time Reporting
  • Reminders
  • Reporting & Statistics
  • Reporting/Analytics
  • Reputational Risk Management
  • Response Management
  • Risk Alerts
  • Risk Analytics
  • Risk Assessment
  • Risk Reporting
  • Risk Scoring
  • Security Auditing
  • Task Management
  • Third Party Integrations
  • Training Management
  • Vendor Management
  • Version Control
  • Workflow Management

View full list of Risk Management Software

MyVCM Alternatives

More MyVCM alternatives

MyVCM Reviews for UK Users

Read all reviews

Overall rating

4.7/5

Average score

Ease of Use 4.2
Customer Service 5
Features 4.5
Value for Money 4.4

Review software

Share your experiences with other software buyers.

Write a Review!
Alec Z.
Alec Z.
CTO
Hospital & Health Care, 11-50 Employees
Used the Software for: 1+ year
  • Overall Rating
  • Ease of Use
  • Features & Functionality
  • Customer Support
  • Value for Money
  • Likelihood to Recommend
    9/10
  • Reviewer Source 
  • Reviewed on 18/11/2019

"Straightforward way to implement a well-tracked compliance program"

Comments: MyVCM has allowed our small organization to implement a solid compliance program starting as early as 10 employees, and now scaling to 30-40 individuals tracked and many systems and assets. I assume MyVCM will be able to cover us as we scale to 50-100 or more individuals as well.

Pros: Makes it easy to manage policies, run risk assessments, establish recurring audit tasks, and record and track compliance across an organization. Good and proactive support from the company, and the company and founder clearly care about the product and the mission and are actively introducing new useful features from their deep domain knowledge.

Cons: The UX flows are somewhat unintuitive at times, and the product can be complex with significant learning curve. Compliance is complicated, so it's understandable... but could be better. They offer policy templates as well, but they contain some typos and aren't fully harmonized with each other.

  • Reviewer Source 
  • Reviewed on 18/11/2019
Cassey S.
Facility Security Officer
Information Technology & Services, 11-50 Employees
Used the Software for: 1+ year
  • Overall Rating
  • Ease of Use
  • Features & Functionality
  • Customer Support
  • Value for Money
  • Likelihood to Recommend
    10/10
  • Reviewer Source 
  • Reviewed on 27/06/2019

"MyVCM was key to both establishing and maintaining our security program."

Comments: Building a security program from scratch is extremely overwhelming. Especially when it's not your primary function within an organization and you have no security experience. MyVCM breaks down the steps into manageable tasks and then gives you the tools you need to maintain the program. I tell the system what training and policies apply to which employees and the system does the rest. My team gets reminders for actions and I can pull reports at any time.

Pros: It can assist anyone in building and maintaining a security program.
You don't have to be a security professional to use the tool.
The tool provides training and document templates.
The tool makes managing - training, audits and other security activities - easy.
The software is consistent and easy to use.
The support team us always friendly and super responsive.

Cons: It can sometimes be confusing what needs to be completed on certain action items. For example, when a document has met it's expiration date there is an action for the owner to review the document. The owner needs to review the document and push out the due date another year - I didn't find this to be intuitive but I can see why it was designed that way to provide additional flexibility.

Vendor Response

by Ostendio on 02/08/2019

Cassey,

Building a security program is very overwhelming, so we are happy MyVCM helped break everything up into manageable pieces. We look forward to helping out everywhere we can. Thanks!

All the best,

JM

Sr. Customer Success Manager

  • Reviewer Source 
  • Reviewed on 27/06/2019
Kim H.
CTO
Health, Wellness & Fitness, 2-10 Employees
Used the Software for: 1-5 months
  • Overall Rating
  • Ease of Use
  • Features & Functionality
  • Customer Support
  • Value for Money
  • Likelihood to Recommend
    7/10
  • Reviewer Source 
  • Reviewed on 08/04/2020

"Still implementing, but so far so good"

Comments: We are a "growing teenage startup" that has to make the transition into a larger and more organized company. SOC2 Type 2 is our goal, but honestly we wouldn't have known how to really get going. Ostendio's professional services have thus far exceeded expectations, the advice they've provided coupled with the real work they've done has 100% enabled us to start this journey with a good probability of success.

Pros: The best features (so far) have been the similarity of the interface between its various sections, making it easier for all users to learn. Thusfar, we haven't had difficulties getting people trained and using the system—and having people use the system is crucial because spotty use will lead to future problems.

Cons: Finding features can be challenging, but folks can be trained. The email notification system is nearly too much, some of our people aren't really paying attention and it might help if we could modify the email so we can highlight do-not-ignore action items. We're not yet into routine use of the software but can see a place for a look-ahead calendar to help with planning upcoming audits, document reviews, and other scheduled tasks.

  • Reviewer Source 
  • Reviewed on 08/04/2020
Oscar S.
Information Security Officer
Medical Devices, 51-200 Employees
Used the Software for: 2+ years
  • Overall Rating
  • Ease of Use
  • Features & Functionality
  • Customer Support
  • Value for Money
  • Likelihood to Recommend
    8/10
  • Reviewer Source 
  • Reviewed on 29/07/2019

"Feature-Rich Product That's Constantly Improving On Itself"

Pros: MyVCM provides a wide range of functionality and modules built-in that grants us all the tools we need to build our security framework. On top of that, Ostendio is very receptive to customer feedback and is constantly incorporating new features and improvements based on that feedback. So, what I like the most about this product is the functionality that is continually improved upon.

Cons: The policy and procedural templates that come with Standard licensing is sub-par and required a lot of adjustment to make usable. Once we upgraded to Premium licensing, we gained access to the Premium Templates which are phenomenal.

Vendor Response

by Ostendio on 02/08/2019

Oscar,

Thanks for the kind words. As you know, we love to get feedback and continuously work to keep improving MyVCM. We look forward to working with you for many years to come.

All the best,

JM

Sr. Customer Success Manager

  • Reviewer Source 
  • Reviewed on 29/07/2019
Jim N.
Systems Administrator
Health, Wellness & Fitness, 11-50 Employees
Used the Software for: 2+ years
  • Overall Rating
  • Ease of Use
  • Features & Functionality
  • Customer Support
  • Value for Money
  • Likelihood to Recommend
    10/10
  • Reviewer Source 
  • Reviewed on 03/09/2019

"Solid Product that really helped our certification process"

Comments: MyVCM is facilitating and enabling our certification process for SOC II and HITRUST. It holds all of our polices and procedures, as well as the evidence we post supporting our implementation. MyVCM also contains the assessment questionnaire that we use as a gauge to determine how far along we are in the compliance implementation process.

Pros: Ease of use and features. Easy to set up users, assign them documents, then record who has acknowledged receipt of said documents. Documents can either be stored as document files or links to documents on other storage platforms. The roles of approver, custodian and customer allow for routing flexibility when processing policy documents.

Cons: No real pain points to relate. I would like to be able to make more changes to policies without triggering a policy update process, but that would somewhat defeat the purpose of a protected policy system.

  • Reviewer Source 
  • Reviewed on 03/09/2019