--- title: "TRAC Reviews 2026. Verified Reviews, Pros & Cons | Capterra" description: "Is TRAC the right Audit solution for you? Explore 49 verified user reviews from people in industries like yours to make a confident choice." source_url: "https://www.capterra.com/p/10011900/TRAC/reviews/" page_type: "reviews" language: "en" publication_date: "2026-09-30" --- TRAC 4.8 (49) [View alternatives](https://www.capterra.com/p/10011900/TRAC/alternatives/) Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Learn more](https://www.capterra.com/our-story/) * * * Last updated September 30th, 2026 # Reviews of TRAC Ease of use 4.4 Customer Service 4.9 ## Pros and Cons in Reviews JC Jeremy C Information Security OfficerFinancial Services, 11 - 50 employeesUsed the software for: More than 2 years. “Overall it is a good product that helps keep information security tasks up to date and allows for good overall management of IS processes.“ July 11, 2024 MB Maranda B SVP Information ServicesFinancial Services, 51 - 200 employeesUsed the software for: More than 2 years. “There are some small nuances with the system that can cause some pain points with filters, screen refreshes and updates, etc. Also learning where and how to use the system is complex and takes some time.“ June 17, 2024 WC Wade C VP Information SecurityFacilities Services, 201 - 500 employeesUsed the software for: 1-2 years. “The support and documents are regulatory focused which ensures we are implementing policies, programs and procedures based guidelines set by our industries' regulatory bodies, which bodes well when the bank is audited and examined by those regulators.“ September 15, 2023 MF Melinda F ISOBanking, 11 - 50 employeesUsed the software for: More than 2 years. “Permissions are a bit confusing in the implementation.“ August 31, 2023 WC Wade C VP Information SecurityFacilities Services, 201 - 500 employeesUsed the software for: 1-2 years. “The solution is fairly intuitive, and the reporting is great when you need to pull data for management or an executive summary. “ September 15, 2023 MF Melinda F ISOBanking, 11 - 50 employeesUsed the software for: More than 2 years. “If not admin; some users find it difficult to use.“ August 31, 2023 JP Jared P Vice President/ISOBanking, 11 - 50 employeesUsed the software for: More than 2 years. “Nothing is more valuable than time in a community bank when one of the biggest keys is lean operating. “ August 22, 2023 ## Showing most helpful reviews Showing 1-25 of 49 Reviews Sort by: Most Helpful Rating Company Size Reviewer's Role Length of Use Frequency of Use JM Joni M. ISO Banking Used the software for: 6-12 months ### "Get Trac Now!" October 18, 2024 5.0 I love having Trac! I am a newer ISO at this Bank and I felt overwhelmed by the whole Vendor Management task. Trac broke it down for me, helped me go through the process with my 4 most critical Vendors, and showed me what to look for within the SOC Reports. They made it easy!! Pros We needed a simple, effective tool to help us track and risk rate our Vendors, Trac is all of that and more! Cons Some of the questionaires for Contracts and Due Diligence can be lengthy, but they are thorough! Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/)[Venminder](https://www.capterra.com/p/132271/Venminder/) Reason for choosing TRAC installation assistance, simplicity, thoroughness Review Source Response from SBS CyberSecurity October 25, 2024 Thank you for sharing your feedback on TRAC! We're thrilled to hear that it has been a simple and effective tool for tracking and risk rating your vendors. We appreciate your patience with the thorough questionnaires and are glad that TRAC has made the vendor management process easier for you, especially as a newer ISO. Your positive comments about the installation assistance, simplicity, and thoroughness are greatly valued. Thank you for choosing TRAC. ~ The SBS CyberSecurity Team RW Robert W. IT Manager Banking Used the software for: 1-2 years ### "Trac review 101824" October 18, 2024 5.0 I am able to track multiple part of IT I am responsible for in a single pane feel. Pros Easy to use and understand. The multiple solutions share data and interact with each other seamlessly. Cons The login. I like that it remembers most of my login but the Ping is a little much. Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC Cost and support was better with Trac. I believe it was the best solution for the cost. Review Source Response from SBS CyberSecurity October 25, 2024 Thank you for your valuable feedback on TRAC. We appreciate your positive comments on its ease of use and seamless data interaction. We acknowledge your concern about the login process and will consider improvements. Your ability to track multiple IT responsibilities in a single pane is exactly the kind of benefit we aim to provide. We're glad you found TRAC to be the best solution for cost and support. ~ The SBS CyberSecurity Team JF James F. ISO Banking Used the software for: 2+ years ### "End user viewpoint" August 14, 2023 4.0 It gets the job done for my needs. Pros Solves most of my compliance needs with regulators for vendor management, IT risk assessment. I do not use the other modules as we have other products. Cons Like all vendors, there are flaws and annoying issues that should be resolved. SBSCyber does resolve most items provided to support. There is an active development in the product(s) and an end user group that meets annually. Review Source AD Allen D. AVP IT Banking Used the software for: 2+ years ### "Having SBS CyberSecurity's TRAC system makes my job MUCH easier!" September 7, 2023 5.0 Overall, I have saved HOURS of time utilizing TRAC. It allows us to manage our contracts and risk audits so much easier and do more than what the regulators are requiring. This enables us to keep our ducks in a row much easier. Pros The useability of TRAC makes my life so much easier. Before choosing TRAC, I tested multiple solutions ranging from cheap to super expensive. Those systems tested were decent, but TRAC was designed in my opinion with the end user in mind. I feel if I would sit down and design a system today, this is how I would have designed it. Since their company also does outside security audits for financial instructions, I feel it keeps TRAC current with what regulators are requiring. Cons I understand why they offer separate TRAC modules, but I wish they offered better pricing for existing customers. Even better if I use them for my 3rd party security IT audits, it would be nice to be able to purchase TRAC inclusive package for a discounted flat fee. Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC There are several reasons we chose TRAC over the alternative. We've utilized SBS CyberSecurity for the past 3-4 years for our 3rd party IT Audits. They have done a tremendous job each and every time. They stay on the cutting edge of IT and Security and every single person I've ever spoken with is so nice and helpful. We thought that since they do stay on the cutting edge of what's happening, they would evolve their TRAC product as regulation changes keep it current and functional. They were also the only one to check everything we had on our list of requirements for the TRAC like products we tested. Review Source Response from SBS CyberSecurity September 8, 2023 Thank you for your kind words! We're grateful you are pleased with TRAC and our service offerings! Our SBS Team is committed to excellence, and hearing how much time this saves you is very appreciated and helps us to know the time and effort the team puts into staying current is of value! We also appreciate your transparency about our pricing and the inclusive package suggestion. We will pass this on to the appropriate team members for consideration. Best, The SBS CyberSecurity Team ML Michael L. VP, Information Technology Officer Banking Used the software for: 2+ years ### "Trac Review" August 23, 2023 5.0 TRAC provides easy to use and up to date tools to help automate and assist an organization in the implementation of their information security program. Pros TRAC's IT Assets, Vendor, and Business Continuity modules provide a straightforward and consistent method to conduct risk assessments for these activities plus it generates reports and review schedules. You can easily document references and add notes to each item in the modules. The Information Security Program (ISP) module is a customizable tool that generates polices and maintains a review schedule. Cons I would like to see more customization options for the vendor management module, especially for vendor selection. Vendors provide diverse products and services to banks. Some vendors do not provide services or products that apply to a strict safe guarding regulatory approach to vetting or managing a vendor. For non-bank transaction centric vendors, banks still have needs to manage these vendors which TRAC is capable of handling. Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/)[Venminder](https://www.capterra.com/p/132271/Venminder/) Reason for choosing TRAC Cost and ease of use along with the feature of the Action Tracking module. Review Source CW Carolyn W. CISO Financial Services Used the software for: 6-12 months ### "Organization and Reporting" August 18, 2023 5.0 Organization and truly knowing what you have and how each asset or vendor touches your network. Increased your awareness and thus your ability to take action where you see possible vulnerabilities you may not have been aware of before from third parties who do not undergo penetration testing. Pros I like the reporting features for both board members and auditors. I love having all our vendors in one location and on a schedule for reviews. We like how you can assign an owner who knows the asset best to help you accurately manage. Cons You have to buy user licenses just for the owners to come in once a quarter and approve or review their assigned assets. We ended up printing them out and handing to each owner then one person has to enter all their data or changes manually and hit approve on their behalf. Sort of defeats the purpose but saves us a lot of money. Alternatives considered [KnowBe4](https://www.capterra.com/p/10001983/KnowBe4/) Reason for choosing TRAC Easier to understand the layout, geared more towards my knowledge learned from attaining my CISM certification. Review Source Response from SBS CyberSecurity August 21, 2023 Good day, Carolyn, We appreciate your honest feedback and are thankful for your time and your on-going business! I've contacted you privately regarding the user license issue to understand the concern better. We do not do per-user organizational licensing, so you can create additional users as a TRAC administrator. We look forward to clearing up any confusion that may exist! Regards, The SBS CyberSecurity Team BK Britney K. Executive Vice President Banking Used the software for: 1-2 years ### "Trac Review" August 9, 2024 5.0 The experience with TRAC and with the staff behind the product has been great. I like that if you have several solutions they will integrate with one another. Pros Ease of use and functionality. We are a small institution and sometimes products are not scalable to our needs. Trac is Cons Would like if Trac would allow for mass upload of documents in Vendor Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC Easier to use and setup along with cost considerations. Better customer support Switched from [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Easier to use and setup along with cost considerations. Review Source Response from SBS CyberSecurity August 15, 2024 We are happy to hear you are pleased with the ease of use, scalability, and our team members! We appreciate your sharing, too, your desire to have a mass upload feature and this will be shared with our development team. Thank you for taking the time to respond, and thank you for your continued business. We appreciate you. TS Trisha S. Operations Systems Administrator Banking Used the software for: 1-2 years ### "Operations Systems Administrator" September 16, 2024 5.0 TRAC has been a great product for our Bank. It has provided us the tools to have a successful Information Security Program. Pros The collaboration between modules has made things more efficient. Cons There isn't anything specific that I can think of. Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC The user friendly functionality. The features the product had with integration. Review Source Response from SBS CyberSecurity October 8, 2024 It's great to hear you find value in our TRAC product and enjoy the integrations the tool provides. Thank you so much for the positive thoughts and feedback. ~ The SBS CyberSecurity Team TB Tammy B. VP, Chief Information and Technology Officer Banking Used the software for: 2+ years ### "Citizens Bank of Charleston" January 15, 2025 5.0 Pros Trac is a great tool to assist us in our security needs Cons I don't have a feature that I like the least. Review Source WC Wade C. VP Information Security Facilities Services Used the software for: 1-2 years ### "Information Security Program, Business Continuity Program, Cybersecure Assess, IT Risk Assess" September 15, 2023 4.0 We are using it for vendor management and to build a new Information Security program for our new bank. The support and documents are regulatory focused which ensures we are implementing policies, programs and procedures based guidelines set by our industries' regulatory bodies, which bodes well when the bank is audited and examined by those regulators. Pros The solution is fairly intuitive, and the reporting is great when you need to pull data for management or an executive summary. Data in the module feeds into other modules, which is great for building policy and program documents and reduces redundancy of data entry. Cons No way to set ticklers for vendor reviews or Action Tracking. Would be great if it could notify whoever's email address is noted when a vendor review is due or when a contract is up for renewal. Also, it would be nice to be able to upload multiple files at once. For example due diligence documents for a vendor. As is you have to upload them one at a time which is tedious. Review Source Response from SBS CyberSecurity September 18, 2023 Thank you so much for your thoughtful responses and for sharing your ideas for things we can consider for improvement! We are happy you are finding value in TRAC and module integration in addition to reporting and how you use TRAC to assist in preparation for regulatory examinations. Regarding the ticklers for vendor reviews and action tracking. This is a current feature in TRAC under Settings. We'll reach out to you privately with details on this feature. We also have an enhancement request in our development area for uploading multiple files. We appreciate your bringing these items up! Best, The SBS CyberSecurity Team VR Verified Reviewer IT Officer Banking Used the software for: 2+ years ### "TRAC makes Information Security easier" October 31, 2024 5.0 Pros TRAC integrates into our audit process. The modules in TRAC allow us to streamline the process and perform our information security tasks with ease. Cons TRAC has been helpful in many ways. The features provided work well. I have no issues with TRAC. Review Source BH Brent H. VP - Risk Officer Banking Used the software for: 2+ years ### "Great RA platform" September 23, 2024 5.0 Overall, the platform is great and easy to use and we have been customers for a decade now with no plans on changing. Pros The TRAC product is easy to use and includes up-to-date and comprehensive information to keep the Risk assessments timely and effective. Cons I cannot figure out how to change the risk mitigation goal percentage for a couple of areas, so that aspect is not the easiest to figure out. This isn't a big deal though. Review Source Response from SBS CyberSecurity October 8, 2024 We so appreciate your remarks on how easy our TRAC product is to use AND for being one of our long-time customers! I'll pass on your comments regarding risk mitigation goal percentages. Our support is always happy to help. Best regards, The SBS CyberSecurity Team JP Jared P. Vice President/ISO Banking Used the software for: 2+ years ### "trac" August 22, 2023 5.0 Exceptional. It was a game changer for us! Pros TRAC makes us more efficient in our operations/compliance and gives us back time. Nothing is more valuable than time in a community bank when one of the biggest keys is lean operating. Cons I don't have any complaints. Updating of the product and customer service are all top notch. Review Source MS Michael S. SVP, COO and ISO Banking Used the software for: 2+ years ### "Cyber Risk Tool" October 25, 2023 5.0 Very good and positive. Pros I love that the Cyber Risk Tool now being include in Trac is great, so that everything is under onsite and log in. Cons Sometimes hard to navigate and pulling reports can be challenging. Review Source Response from SBS CyberSecurity October 26, 2023 It's great to hear that you are happy with our incorporation of the FFIEC Tool into TRAC. It's good to know you are finding value in that. Additionally, thank you for your transparent comments regarding navigating and pulling reports. We will contact you for more information to understand the challenge better and see what we can do to improve this. We appreciate you! Best, The SBS CyberSecurity Team JL Jason L. CIO Banking Used the software for: 2+ years ### "Trac for Risk assesment" January 17, 2024 5.0 Works well and easy to use. I setup a GLBA report for the board every year using this software. Pros Has great categories that include assets, risk, mitigation. Easy to navigate. Great reports with charts. Cons Really can't think of anything. Everything is well laid out and works well. Review Source Response from SBS CyberSecurity January 26, 2024 We so appreciate your taking the time to complete a review for our TRAC product! So glad you are satisfied with the ease of navigation and we appreciate hearing about the value our reports and charts provide for you. Kind regards, Cindy CT Cassandra T. AVP and IT Officer Banking Used the software for: 2+ years ### "Help Solve your examiners needs!" April 26, 2024 5.0 Pros It covers the variety of compliance needs in an easy-to-use solution. Cons I wish I could add my own comments to the completed reports that make it more specific for my organization and for board reporting. Review Source Response from SBS CyberSecurity May 20, 2024 Thank you for your feedback. We are glad to hear that our solution covers a variety of compliance needs in an easy-to-use manner. We appreciate your suggestion about adding your own comments to the completed reports for more specific organizational and board reporting. We will take this into consideration for future updates and may reach out to you to discuss further. SR Sarah R. Compliance Officer Banking Used the software for: Less than 6 months ### "Compliance Module Review" August 22, 2023 5.0 The Compliance Module is a wonderful tool for a Compliance Risk Assessment. The way in links industry risks is also a very nice feature. Pros I like the ease of inputting processes and determining the risks. How you input controls to mitigate risks is also a very simple process. Cons There is nothing I dislike about TRAC at this time. Review Source AW Amanda W. Information Security Officer Banking Used the software for: 2+ years ### "TRAC Review" October 24, 2023 5.0 My experience with TRAC has been positive. I am able to use the product with ease. If something comes up that I don't know how to do within TRAC or if a function isn't performing properly, I can reach out to our SBS CyberSecurity rep or to customer service and they can either answer my questions immediately or they will research the issue and get back to me. Pros It's a product where all information can be stored in a central location. Action tracking, audit reviews, necessary documents can all be stored and tracked within TRAC. It's also helpful with working on different assessments they walk you through the process with potential questions. Cons Can't really think of anything at this time. Review Source Response from SBS CyberSecurity October 26, 2023 We are so glad to hear your experience with TRAC has been positive! It is also wonderful to hear that our customer support and your account executive quickly get you the necessary answers. We appreciate you taking the time to review our product and company. Best, The SBS CyberSecurity Team MF Melinda F. ISO Banking Used the software for: 2+ years ### "SBS & Trac is a great place to start ISP. " August 31, 2023 5.0 Trac has been a life saver for me in setting up and maintaining my ISP. Also great for audits and project tracking from any area. SBS does great with qtrly fun educational meetings to share and expand knowledge of the product. Pros SBS and Trac is a great place to begin your Information Security Program (ISP). Their system makes it possible to build a cohesive program. The rating is easy and customizable but also the heavy lifting of risk and rating has been pre-entered to help get you started and keep evolving. Examiners love it - since easy to follow. Cons If not admin; some users find it difficult to use. Not intuitive to not IT brains? Really need to watch the permissions to be sure they have read only on what they need. Permissions are a bit confusing in the implementation. Realize cost is needed but wish bigger discount for other products so could use more together. Can't get approval to add on more modules due to cost. Review Source Response from SBS CyberSecurity September 1, 2023 Good day, Melinda, We appreciate your honest feedback and are thankful for your time and your ongoing business! I'll contact you privately regarding the user permissions and discuss any ideas you may have to help our tool be more intuitive. Regards, The SBS CyberSecurity Team TD Trevor D. InfoSec Director Banking Used the software for: 2+ years ### "SBS Makes Bank Compliance Easier" January 16, 2024 5.0 Overall, we are very happy with TRAC and we've had no issues. Pros One stop shop for managing a bank's InfoSec program. Cons There's really no major issues. Only wish list items we have is SSO and an option for one login for multiple institutions (helps with holding companies or MSP) Alternatives considered [KnowBe4](https://www.capterra.com/p/10001983/KnowBe4/) Review Source Response from SBS CyberSecurity January 26, 2024 Thank you so much for your review. Glad to hear we are a one-stop shop for your bank's information security program! SSO functionality is on our roadmap and is actively being worked on now and we are hoping to release this functionality in the first half of 2024. We will reach out to you for a training on the holding companies feature. That feature, pretty new, already exists so happy to help there. Best regards, The SBS CyberSecurity Team JC Jeremy C. Information Security Officer Financial Services Used the software for: 2+ years ### "Trac is a useful tool" July 11, 2024 4.0 Overall it is a good product that helps keep information security tasks up to date and allows for good overall management of IS processes. Pros It's capacity for creating and providing continuous maintenance to FFIEC CAT, IT Risk Assessment and Audit tracking. Cons It's not always easy or intuitive to figure out what you are trying to do. However, support is available and always helpful. Review Source Response from SBS CyberSecurity July 17, 2024 We are grateful to hear that TRAC is assisting you in a variety of ways and that you are finding benefit in TRAC assisting you with the overall management of your IS processes. We appreciate you sharing your expressed concerns on ease of use and we are working on improving in certain areas! So glad to hear our support team is helpful as well! Best, The SBS CyberSecurity Team CK Cindy K. Cyber Security Financial Services Used the software for: 2+ years ### "Turns Risk Management and ERM which is subjective into something quantitative!" April 23, 2024 5.0 Once we managed to gather together all the departments to work on TRAC everyone saw the benefits of this kind of risk management/Vendor Management/ERM software. Pros It is mathematically based, utilizing information garnered from hundreds of other financial institutions. Once you decide on the basics - giving everything a rating from 1 to 5 the mathematics show you exactly what is more important and where to focus your time and money. Cons The software is wonderful - getting the buy-in from staff can be difficult. Reason for choosing TRAC All the research behind the product! University research along with Homeland Security working together to create a product sold me Review Source Response from SBS CyberSecurity May 9, 2024 Thank you for your wonderful review of our TRAC software! We are thrilled to hear that you appreciate the mathematical basis and research behind our product, and that it has helped you focus your time and money. We understand that getting buy-in from staff can be a challenge, and we appreciate your efforts in bringing everyone together to see the benefits of TRAC. Thank you for choosing our software and for sharing your positive experience with us. mB myles B. EVP Banking Used the software for: 2+ years ### "Great Software" June 14, 2024 5.0 Pros Trac makes my job as an executive much easier. We use them for vendor management, FFIEC, Risk Management, BCM, and Cybersecurity Audits and Exam tracking. Our confidence level has greatly increased during NCUA exams since switching to TRAC. Cons Getting a feel for the software can be overwhelming and can take some time. There is definitely a learning curve. Review Source Response from SBS CyberSecurity June 25, 2024 We are happy to hear that TRAC eases your burden and allows you to do your work more easily. We also appreciate your remarks on the learning curve, and we are continuing to improve our self-help within TRAC by providing quick reference guides and workflows to click on to guide you. This is a reminder that we offer free training as well! TH Tim H. AVP of Data Operations Banking Used the software for: 2+ years ### "Review of TRAC" September 20, 2023 4.0 It is an excellent tool for vendor management. Pros Everything in one place. You can store vendor related doc as well as the risk for it. Cons It could use a “Point of View” for some of the questions, this will make it easier to answer then. Reason for choosing TRAC It did what we needed and we can do other functions with it when we decide to pull the trigger. Review Source Response from SBS CyberSecurity September 21, 2023 We are happy you are finding great value in the vendor management module and appreciate your taking the time to respond thoughtfully. Regarding the comment on "Point of View," we want to discuss this with you and will reach out privately. Thank you for sharing an area we might improve upon. Best, The SBS CyberSecurity Team BB Bob B. Chief Information Officer Banking Used the software for: 2+ years ### "Risk assessments made easy" February 6, 2024 4.0 Pros I see two main benefits from TRAC. 1) It is way easier than maintaining the spreadsheet based risk assessments we used originally. We didn't know if our examiners were going to agree with our assessments, whether it was the level of risk or the value of mitigations. This way we can rely on an expert opinion for those facts, and save a TON of time on the assessments themselves. 2) It helps us to see where our dollars will have the largest impact. We can use the planned control option to see how much a new logging system might move the needle on risk across the board. Cons I would like to get raw data out of it, so we can analyze and report on it ourselves without using their tooling. It would also be nice to have a backup of our own. Review Source Response from SBS CyberSecurity February 9, 2024 Thank you so much for taking the time to review TRAC. It is great to hear TRAC is saving you a TON of time and helps assist you with where to spend your budgeted security dollars and where you will see the most impact. Thanks for being so open with your raw data needs and the backup desire. These comments have been passed on to our product team. Best Regards, The SBS CyberSecurity Team Similar Products Featured ## Send me user reviews about this product ### Fill out the form and we'll send a list of the top-rated software based on real user reviews directly to your inbox.