With the help of NAVEX IRM I get a good opportunity to centralize the IT risk management. A better alert system that focuses on the most important issues would be much more helpful on the platform and easier to manage to keep track of real threats.

It works well enough as a vendor review product for our third party risk team. However, as we've learned of other technology in the same space we've identified lacking capabilities and ease of use.