Diligent HighBond
By Diligent
Initial Consultationand Planning: This phaseinvolves understandingthe specificneeds of theorganizationand planningthe deploymentstrategy. Thegoal is to alignthe softwarecapabilitieswith the businessrequirements.
Configuration andCustomization: Thesoftware is configuredto meet the specificrequirementsof the business. This includessetting up workflows, integratingwith existingsystems, andcustomizing dashboardsand reports. Diligent HighBond offerspre-configured plug-and-play solutionsthat can be tailoredto deliver best-in-class GRC programs.
Data Migration: Existing datais migrated intothe HighBond system. This step ensuresthat all relevantdata is availablewithin the newplatform forseamless operation.
Training andOnboarding: Usersare trained onhow to use thesoftware effectively. Diligent HighBond providescomprehensivetraining to helpusers get startedquickly and effectively.
Automated Workflows: HighBond allows organizationsto design automated, end-to-end workflowsthat ensure policiestake shape inreal time, whichcan be tailoredto meet specificGRC needs.
Advanced DataAnalytics: Theplatform leverages advancedanalytics thatmake deep insightsaccessible toeveryday users, allowing forthe developmentof effectiveworkflow automations regardlessof tech fluency.
Configuration Options: Diligent One, the platformencompassingHighBond, offersmany configurationoptions to avoidcomplicated websof customizationand bespoke GRC environments.
Pre-configuredSolutions: HighBond providespre-configured plug-and-play solutionsdesigned to deliverbest-in-class GRC programs, whichcan be tailoredto specific organizationalrequirements.
Basic Support Services: Basic support services (24x5) are included at no additional charge. Enhanced support services may be available for purchase via an Order Form.
Subscription Fees: The starting price for the Diligent One Platform, which includes HighBond, is $5,000 per year.
Consulting Hours: Subscriptions that include Impact Reports come with a set number of consulting hours. Additional consulting hours can be purchased separately.
Online Training: Available 24/7 through the HighBond launchpad, allowing users to access practice data for hands-on learning and a comprehensive curriculum.
In-Class Training: Open enrollment training with HighBond Certified trainers in a classroom setting.
On-Site Training: Tailored instruction provided at the client’s location, using their data to meet specific business goals.
Diligent Academy: An online training resource complete with courses, video tutorials, and certification programs designed to help users leverage the entire Diligent platform. This is included at no extra cost for subscription users.
Certification Programs: Users can earn certifications such as HighBond Certified Professional or Analytics Certified Data Analyst (ACDA) to prove their technical proficiency and professional expertise.
Access Control: Access is granted on a need-to-know basis using ticketing, approval system, IP whitelisting, username/password, multi-factor authentication, and private keys. Session limits and activity tracking are in place.
Data Encryption: Encryption is used for data in transit (TLS/AES 256-bit) and at rest (AWS storage encryption using AES 256-bit keys).
Physical Security: Diligent offices have security guards, alarms, and access controls. AWS is responsible for physical security at their data centers.
Network Security: Firewalls, intrusion detection/prevention, and real-time alerting are used to secure the network.
Vulnerability Management: Regular vulnerability scanning and patching is performed on systems and applications.
Backups and Disaster Recovery: Regular backups are taken, with backup media encrypted and stored securely offsite. Business continuity and disaster recovery plans are maintained.
These examples illustrate that updates are rolled out frequently, often several times a month, ensuring that the platform remains current and continues to meet user needs.
Management of Updates
Updates to the Diligent HighBond platform are managed as follows:
Cloud-Based Delivery: Since HighBond is a cloud product, updates are delivered automatically to all users without the need for manual intervention. This ensures that all users have access to the latest features and fixes as soon as they are released.
Release Notes: Detailed release notes are provided for each update, outlining the new features, enhancements, and fixes included. These notes help users understand the changes and how they might impact their use of the platform.
Phased Rollouts: Some updates, especially those involving significant changes or new functionalities, are rolled out in phases. This approach helps manage the deployment process and ensures stability and performance.
User Notifications: Users are typically notified of upcoming updates and any potential impact on their workflows. This communication helps users prepare for changes and take any necessary actions to adapt to new features or enhancements.
Data Ownership
Diligent HighBond ensures that clients maintain full ownership of their data throughout its lifecycle. This includes:
Full Control Over Data Lifecycle: Clients have complete control over their data from migration to deletion. This means that clients can manage their data as they see fit, including determining data retention policies and deleting data when necessary.
Client Responsibility: Clients are responsible for determining their own data retention controls and for deleting their data from the Diligent Service. Diligent provides access to the service for a period of thirty (30) days after the expiration or termination of the subscription to facilitate data removal, which can be extended by an additional thirty (30) days upon written request.
Data Storage Location: Clients can choose the geographic region where their data is stored to meet compliance requirements. This flexibility helps clients comply with various data privacy laws and regulations.
Data Portability
Diligent HighBond supports data portability, allowing clients to transfer their data as needed:
Data Migration: Clients can migrate their data into and out of the HighBond platform. This ensures that clients can move their data to other systems or platforms if required.
Access to Data: Upon termination or expiration of the subscription, clients are given a period to access and remove their data from the Diligent Service. This ensures that clients can retrieve their data before it is permanently deleted from the system.
Compliance and Security
Diligent HighBond adheres to various compliance standards and security measures to protect client data:
Compliance with Data Privacy Laws: The platform is compliant with data privacy location requirements, allowing clients to store their data in regions that meet their physical, security, and performance needs.
Annual Allotment of Hours: If a client has purchased an annual allotment of hours of Professional Services, these hours can be used throughout the annual subscription term. However, any unused hours will not carry over to the following subscription term and will be forfeited if the subscription is canceled.
Subscription Adjustments: Any reduction in the quantity of any purchase made in an Order must be agreed upon in writing by the parties at least thirty (30) days in advance of the commencement of the next Renewal Term. If there is no written agreement to reduce the quantity, the Agreement will automatically renew for the same quantity as the preceding term.
Automatic Renewal: After the Initial Term, the Agreement will automatically renew for additional one (1) year terms unless either party provides written notice of non-renewal no later than thirty (30) days prior to the expiration of the Initial Term or any Renewal Term.
Revised Pricing: Diligent may implement revised pricing for any Renewal Term by giving written notice of the new pricing to the client at least sixty (60) days prior to the commencement of a Renewal Term. The new pricing will apply unless the client provides written notice of non-renewal.
Termination for Cause: Either party may terminate the Agreement if the other party materially breaches the Agreement and fails to cure the breach within thirty (30) days after receiving written notice specifying the breach. Additionally, Diligent may terminate the Agreement immediately if the client breaches confidentiality or access rights provisions.
Data Access Post-Termination: Upon termination, clients will have access to the Diligent Service for thirty (30) days to facilitate data removal, which can be extended by an additional thirty (30) days upon written request. After this period, Diligent will delete the client data, including backups, within 120 days unless otherwise agreed in writing.
ISO/IEC 27001: Diligent follows ISO/IEC 27001 standards to keep information assets secure by implementing an Information Security Management System (ISMS).
NIST Cybersecurity Framework: Diligent’s Security Program is governed based on the NIST Cybersecurity Framework, ensuring robust security measures are in place.
SOC 2 Type II: Diligent maintains a current SOC 2 Type II report, which includes a comprehensive internal controls assessment covering the internal controls and information security related to the Diligent Service.
GDPR Compliance: HighBond helps organizations evaluate and maintain their GDPR compliance status by providing tools to map controls and procedures to legislative requirements and automate monitoring of compliance activities.
