We performed a comparison between MEGA HOPEX and OneTrust GRC based on real PeerSpot user reviews.
Find out in this report how the two GRC solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the completeness of HOPEX's meta-model. It's a strong meta-model that's rigid but comprehensive. It's a logical fit for our understanding of how we want things modeled in our database."
"The most valuable feature is that the software controls everything from a single management window."
"We use the portfolio management feature heavily."
"The main feature I find crucial in MEGA HOPEX is the catalog view, which provides a comprehensive visualization of all artifacts in one repository. Another valuable aspect is the availability of out-of-the-box outcomes, such as strategy maps and BPA models, eliminating the need for additional configuration. MEGA HOPEX allows users to focus on specific business areas, like risk management or data governance, providing a high-level overview while enabling deep dives into specific areas of interest. For risk management, MEGA HOPEX allows users to assess impacts, create recovery plans, and track action plans."
"The tool is very simple and intuitive to use."
"The dashboard on the homepage makes for an enhanced view at a glance of the various work functions applicable to the user."
"The solution is scalable. If a company needs to expand it, it's completely possible to do so."
"What I find the most valuable is the process workflow. It is really good."
"OneTrust GRC is stable."
"One of the valuable features of this solution is it has the ability to review fourth and fifth parties to the nth degree."
"It does help in the automation of our privacy impact assessments."
"The product helps us streamline audit and incident management processes."
"Vendors can be assessed and rated out of the tool, and assessments can be scheduled for updates at certain intervals."
"As a solution for IT risks, it is a very good product."
"We receive notifications or cases and prioritize them accordingly, which helps us address issues promptly."
"The tool usability is weak and it also has a high learning curve."
"We have a very close relationship with MEGA representatives in Mexico, and we ask them why they don't offer impact analysis. For example, we have a server in the center and provide the client a view of what's in the peripheral area, like one cluster, application, process area, and services. We want to offer our clients that level of visibility with HOPEX."
"Scalability can be a problem sometimes."
"MEGA HOPEX can improve process simulation in the BPA module. If the solution was better we would not have to use another solution for this purpose. Simulating scenarios in the future for the to-be processes is in demand. If we can have the simulation engine built inside MEGA HOPEX, we would not have to purchase another license or solution to integrate them with each other. This would be a great improvement."
"We would like to see integration with other products, such as being able to use our workflow with SharePoint and Microsoft Office."
"Standardization is lacking. The Operational Risk Function will be more effective if it at a default level follows established Basel standards for Loss categorization, Risk Assessments, Risk Event categorization, etc."
"It has a data domain where we load our data objects onto the tool but doesn't provide data governance capabilities such as cleansing or validating data."
"MEGA HOPEX's initial setup could be easier. The newer version is better but they still need to improve the process. The deployment took approximately four to eight hours."
"They could improve by offering free help. A solution, a lot of times, is not just the use of the solution. For example, it is the overall engagement, how well do they support the system, what is their SLA, and how long their response time is to an issue. It would be beneficial if they had some type of professional services where they offer the first five hours of professional services a year for free. That would be a substantial benefit rather than having to buy professional services or professional services packages."
"The Vendor Risk dashboard is quite basic today and not interactive, but improvements are in coming the next releases."
"There are limitations to customized workflow automation, and they need to increase both the available automation and the customized workflow."
"The product is not that easy to set up."
"I haven't seen any return on investment using the solution. If I had the opportunity, I would use a different solution."
"We encounter difficulties creating multiple platforms or interfaces and manual processes for changing certain settings."
"OneTrust GRC's workflows aren't automated and need to be manually driven."
MEGA HOPEX is ranked 4th in GRC with 36 reviews while OneTrust GRC is ranked 5th in GRC with 7 reviews. MEGA HOPEX is rated 7.8, while OneTrust GRC is rated 7.6. The top reviewer of MEGA HOPEX writes "Easy to use and robust with good features". On the other hand, the top reviewer of OneTrust GRC writes "Costly solution that may not guarantee ROI, but remains effective in IT risk management ". MEGA HOPEX is most compared with Sparx Systems Enterprise Architect, LeanIX, ARIS BPA, Visio and Avolution ABACUS, whereas OneTrust GRC is most compared with RSA Archer, ProcessUnity, AuditBoard, Workiva Wdesk and LogicGate. See our MEGA HOPEX vs. OneTrust GRC report.
See our list of best GRC vendors.
We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
