“Everyone else is performing a commodity-style assessment. The documents are not analyzed and read in the same critical way. We are doing a better job,” explains Stephen Collins, Senior Advisor at Impact Advisors.

"It allows for a cleaner and more value-driven assessment for our clients, who are seeing the benefits of organizing their security programs with supporting documentation all in one central location,” said Marc Johnson, CISO, Impact Advisors.

“Within healthcare, HIPAA is an obvious framework, but many clients also look to more prescriptive frameworks such as NIST to guide their security programs. The compliance tool needs to cover them all,” said Stephen Collins.

With Ostendio, smart tags can be added to each document, making it simple to crosswalk to the 200+ built-in frameworks and track evidence for each control. “I can give our clients their documents back all in one place and properly cited. And what sealed the deal for me was that I can create a custom framework that is smart tag ready,” said Collins.

 “The platform is generally intuitive, [but] the customer success team feels like I have an expert partner and that is what I needed in terms of service from a vendor.”  

“I evaluated several products, and I found that there are a lot of tools out there that look like Cadillacs but, under the hood, are not that powerful. I quickly ruled out some that require hundreds of people just to manage them, because that will not work for our clients. Ostendio is both valuable and cost-effective for us and our clients,” explained Marc Johnson, CISO at Impact Advisors.

“We focus on creating solutions for our clients that continue to deliver value over time. After using Ostendio for the first year, going forward they will have documents tagged correctly, making them organized for their annual assessment. It is a stronger value proposition for the client. I can also give them more meaningful security suggestions based on their year-over-year experience,” said Collins.

Using the Ostendio platform is part of a long-term commitment that Impact Advisors has to its clients. As Collins explains, “We focus on creating solutions for our clients that continue to deliver value over time. After using Ostendio for the first year, going forward they will have documents tagged correctly, making them organized for their annual assessment. It is a stronger value proposition for the client. I can also give them more meaningful security suggestions based on their year-over-year experience.”

Johnson believes that using the Ostendio platform will be beneficial to clients in the future on many levels. He said, “We can interact with the client more succinctly through the Ostendio platform. It is a single location to go to for each document they have shared.” He added, “Many of our customers do not have a GRC tool today. They are responding to audits from payers or cyber insurance companies in an ad hoc manner. When we help them using Ostendio, they have an organized way to do it.” Johnson continued, “As we ramp up the service, clients are seeing the benefits of tracking audit tasks and having them scheduled automatically. In the long term, they will see it helps them as a tool to facilitate their information security program. If you are organized, your documentation will be reviewed regularly, cited properly, and crosswalked. Clients will notice their people have more time to do their jobs.”