Riskonnect
by Riskonnect, Inc. · Audit Management
Integrated risk management platform with an internal audit management solution.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Deployment
- Cloud
- Company size
- Mid-market, Enterprise
- Pricing
- Subscription (per user, annual)
- Founded
- 2007
- Headquarters
- Atlanta, Georgia, United States
Overview
Riskonnect is an integrated risk management (IRM) platform founded in 2007 and headquartered in Atlanta, Georgia. It is majority owned by private equity firm Thoma Bravo and has grown partly through acquisition, including Marsh ClearSight, and reports serving more than 2,000 organizations across six continents. Its Internal Audit Software sits alongside related modules for internal controls management, enterprise risk management, compliance monitoring and business continuity on the same underlying platform.
The internal audit module centralizes controls management and monitoring, audit findings management with remediation tracking, and workpaper management for electronically housing audit evidence and documentation. Continuous controls testing uses robotic process automation and machine learning to automate parts of the testing process, and storyboard-driven dashboards communicate audit status to stakeholders. Pre-built risk assessments help scope audits, and automated task assignment with email reminders, plus engagement-letter creation, move engagements through the audit lifecycle end to end on a single platform.
Riskonnect states its platform complies with SOC 2 and ISO 27001 security standards. Pricing is licensed per user on an annual subscription basis, with additional components for the intake portal, professional-services implementation fees, ongoing service hours, data services and data-center fees, varying by project size and complexity. British Telecom (BT) is a publicly cited customer reference for Riskonnect's risk management use.
Screenshots & demo
Demo video from the vendor's YouTube channel. Screenshots sourced from Riskonnect, Inc..
Features & capabilities
Controls and Testing
Design, monitor and automate control testing.
- Audit controls design and management
- Effectiveness monitoring of controls performed
- Continuous controls testing using RPA and machine learning
- Risk-based audit scoping via pre-built risk assessments
Findings and Remediation
Track issues from identification through closure.
- Audit findings management
- Remediation tracking with status visibility
- Automated task assignment and email reminders
- Engagement letter creation and distribution
Documentation and Evidence
Centralized electronic housing of audit work.
- Workpaper management
- Centralized document management for audit files and evidence
- End-to-end audit-process tracking on a single platform
Reporting and Analytics
Communicate audit status and risk insight.
- Storyboard-driven dashboards
- Risk analytics and insights
- Customizable reporting
- Data integrated from multiple sources across the risk platform
Platform Integration
Shared infrastructure with Riskonnect's other risk modules.
- Data shared with internal controls management, ERM and compliance modules
- APIs for data import and export
- Out-of-the-box integrations with specialized risk-data partners
Common use cases
- Running the internal audit lifecycle end to end on a single platform, from planning to remediation
- Automating parts of controls testing with RPA and machine learning
- Scoping audits quickly using pre-built risk assessments
- Centralizing audit workpapers and evidence in one electronic repository
- Communicating audit status to stakeholders through storyboard-driven dashboards
- Tracking remediation of findings with automated task assignment and reminders
- Linking internal audit data with enterprise risk management and compliance monitoring already on Riskonnect
Strengths & considerations
Strengths
- Continuous controls testing applies RPA and machine learning rather than relying only on manual sampling
- Audit module shares a platform and data with Riskonnect's internal controls, ERM and compliance monitoring products
- Grew through acquisition (including Marsh ClearSight), broadening the platform's risk-domain coverage
- Multiple implementation tiers let customers choose a price point matched to project complexity
Pricing
Additional fees apply for the intake portal, professional-services implementation, ongoing service hours, data services and data-center hosting; varies by project size and complexity, with multiple implementation tiers. Get an independent shortlist with pricing guidance below.
Technical & security
- Compliance
- SOC 2, ISO 27001
About the vendor
- Founded
- 2007
- Headquarters
- Atlanta, Georgia, United States
- Employees
- 800+
- Ownership
- Private equity (Thoma Bravo)
- Notable customers
- BT (British Telecom)
Alternatives to Riskonnect in Audit Management
Riskonnect — frequently asked questions
What does Riskonnect's internal audit module cover?
It covers controls design and monitoring, continuous controls testing, findings and remediation tracking, workpaper and evidence management, and audit-status dashboards, all on Riskonnect's shared risk platform.
Does Riskonnect automate control testing?
Yes. Riskonnect uses robotic process automation and machine learning to automate parts of the continuous controls-testing process.
Who owns Riskonnect?
Riskonnect is backed by private equity firm Thoma Bravo and has grown through acquisitions, including Marsh ClearSight.
What security standards does Riskonnect comply with?
Riskonnect states its platform complies with SOC 2 and ISO 27001 security standards.
How is Riskonnect priced?
Pricing is a per-user annual subscription, plus additional fees for the intake portal, professional-services implementation, ongoing service hours, data services and data-center hosting, varying by project size and complexity.
Evaluating Audit Management?
Tell us your ERP and requirements and we'll send an independent shortlist — including Riskonnect and the best-fit alternatives — with honest pros and cons.