TRAC

Pros: Easy to use and understand. The multiple solutions share data and interact with each other seamlessly.

Cons: The login. I like that it remembers most of my login but the Ping is a little much.

Pros: We needed a simple, effective tool to help us track and risk rate our Vendors, Trac is all of that and more!

Cons: Some of the questionaires for Contracts and Due Diligence can be lengthy, but they are thorough!

Pros: TRAC is customized for financial institution environments. The asset categories, default threats and possible controls are well thought out and appropriate for all situations I've encountered.

Cons: I'd like to see the reporting have a little more flexibility and customization. Most of the time the canned reports give me what I need but there are some situations where I'd like to customize.

Pros: The TRAC product is easy to use and includes up-to-date and comprehensive information to keep the Risk assessments timely and effective.

Cons: I cannot figure out how to change the risk mitigation goal percentage for a couple of areas, so that aspect is not the easiest to figure out. This isn't a big deal though.

Pros: The collaboration between modules has made things more efficient.

Cons: There isn't anything specific that I can think of.

Pros: It is user-friendly. I like that I can add responses to audits for audit tracking.

Cons: I am pretty happy with the IT RA and CAT tools. I tend to forget how to finalize the IT RA, so I think that could be made easier.

Pros: The tracking of audit findings and we keep our polices here and it will give us a monthly report to remind us of the next approval date.

Cons: We use the risk assessments, wish it was easier to use.

Pros: Ease of use and functionality. We are a small institution and sometimes products are not scalable to our needs. Trac is

Cons: Would like if Trac would allow for mass upload of documents in Vendor

Pros: Tracking of assets, vendors, policy and procedures.

Cons: Doesn't allow us to upload certain file types. Would be nice if we could use multiple different file types to accommodate some of our files.

Pros: It's capacity for creating and providing continuous maintenance to FFIEC CAT, IT Risk Assessment and Audit tracking.

Cons: It's not always easy or intuitive to figure out what you are trying to do. However, support is available and always helpful.

Pros: - Regulators seem to accept and like it. - CAT tool integration - Policies templates

Cons: - Asset risk evaluation - upload of policy history

Pros: All the critical areas are documentation and tracking are thought of. Reporting capabilities are fantastic and templates makes the job much easier.

Cons: There are some small nuances with the system that can cause some pain points with filters, screen refreshes and updates, etc. Also learning where and how to use the system is complex and takes some time.

Pros: Trac makes my job as an executive much easier. We use them for vendor management, FFIEC, Risk Management, BCM, and Cybersecurity Audits and Exam tracking. Our confidence level has greatly increased during NCUA exams since switching to TRAC.

Cons: Getting a feel for the software can be overwhelming and can take some time. There is definitely a learning curve.

Pros: The assistance you receive to use CyberSecurity

Cons: The fact that sometimes the assistance doesn't truly understand the size of our institution

Pros: Ease of use of the product was great and has a lot to offer.

Cons: There is no single sign on integration which makes managing employees and users more tedious than it should.

Pros: easy to use, great product for risk assessment, policy storage approval tracking, and vendor management analysis and reviews.

Cons: none that I can think of at the moment. great product.

Pros: It covers the variety of compliance needs in an easy-to-use solution.

Cons: I wish I could add my own comments to the completed reports that make it more specific for my organization and for board reporting.

Pros: It is mathematically based, utilizing information garnered from hundreds of other financial institutions. Once you decide on the basics - giving everything a rating from 1 to 5 the mathematics show you exactly what is more important and where to focus your time and money.

Cons: The software is wonderful - getting the buy-in from staff can be difficult.

Pros: Lots of reporting options. Ease of the reports to manage

Cons: Really nothing. I just dont use it as often as i could

Pros: Management of ISP is very easy in Trac. Vendor Management is a very large and can be complex project. Trac makes it easy to manage, and present to Examiners and Auditors.

Cons: Used to be slow, but that has been resolved. No real complaints, the software has really matured into a good product.

Pros: I see two main benefits from TRAC. 1) It is way easier than maintaining the spreadsheet based risk assessments we used originally. We didn't know if our examiners were going to agree with our assessments, whether it was the level of risk or the value of mitigations. This way we can rely on an expert opinion for those facts, and save a TON of time on the assessments themselves. 2) It helps us to see where our dollars will have the largest impact. We can use the planned control option to see how much a new logging system might move the needle on risk across the board.

Cons: I would like to get raw data out of it, so we can analyze and report on it ourselves without using their tooling. It would also be nice to have a backup of our own.

Pros: Has great categories that include assets, risk, mitigation. Easy to navigate. Great reports with charts.

Cons: Really can't think of anything. Everything is well laid out and works well.