Additional Info

Company size (employees)10 to 49
Headquarters RegionNorth America


At Ostendio, we believe the point of a security program is not merely to satisfy a framework when a company is audited, but to create a culture of data responsibility that it is always ready to demonstrate. The Ostendio MyVCM platform makes it easier for companies to automate their programs so audit, or not, the data the company handles is always secure and verifiable.

Ostendio MyVCM™ is an Integrated Risk Management platform that helps companies build, operate, and showcase their security and compliance program. Companies of all sizes benefit from Ostendio MyVCM, with advanced features to improve security audit efficiency. The platform provides a single solution incorporating users and requirements from across the enterprise. Ostendio MyVCM helps companies: identify and quantify enterprise risk; rapidly build and deploy security assessments; manage and respond to security incidents and breaches; and align vendors and suppliers to security and compliance standards.

Ostendio MyVCM provides real-time data to show how a company is performing against over 100 industry standards and regulations globally. As a cloud accessible tool, Ostendio MyVCM is available to employees regardless of location. Ostendio MyVCM leads the future of security and risk management by helping companies work collaboratively.

In 2020, Ostendio launched MyVCM Vendor Connect offering a uniform vendor management security program that scales, regardless of the number of vendors to prevent third party breaches and MyVCM Auditor Connect – the groundbreaking, collaborative marketplace that helps customers select and work with independent audit firms.Companies in need of security audits can tailor their required needs by over 300 data points. This allows audit firms to tailor proposals specifically to client needs.

The Ostendio MyVCM platform handles over 70,000 user activities each month including document management, security training, asset management and vendor management. Customers come from industries including Hospital and Healthcare, Financial Services, Education, Computer and Network Security,

How we are different

1. Operational - Ostendio MyVCM helps the entire organization with compliance and is not limited to just one element of a business. Real-time analytics provides customers with a single-pane-of-glass view of the company's security posture organized by department, facility, location, geography and by individual user. The system is easy to use on day one and can be used as a data-base of record. Over 70,000 user activities are handled by Ostendio MyVCM monthly including document management, security training, asset management and vendor management.

2. Extensible -In 2020 Ostendio launched MyVCM Vendor Connect which helps organizations manage compliance and risk related to their vendors. Traditional vendor risk management relied on static surveys that vendors completed and mailed in. MyVCM Vendor Connect solves this problem by creating a living ecosystem of vendor assessments. Companies invite vendors to create and maintain online records of their security and compliance readiness via assessments. Responses link to supporting documentation that are easily accessed and kept up to date. Companies can designate assessments to vendors based on specific regulations, or tailor them to their specific requirements.

3. Real-time audit collaboration - Launched in 2020, the groundbreaking MyVCM Auditor Connect reinvents the audit process, rendering spreadsheets, third party file shares and storage devices effectively obsolete. MyVCM Auditor Connect brings the auditor and customer together on one platform where they can share real-time evidence in a secure location. Unlike previous methods of conducting audits, Ostendio MyVCM provides access to evidence and documents that are always available, easy to update and optimized for collaboration. Customers being audited can track progress in real time and the increased collaboration and efficiency can save time and cost to auditors and customers.