# TRAC Reviews 2026. Verified Reviews, Pros & Cons | Capterra > Is TRAC the right Governance, Risk and Compliance (GRC) solution for you? Explore 49 verified user reviews from people in industries like yours to make a confident choice. Source: https://www.capterra.com/p/10011900/TRAC/reviews --- TRAC 4.8 (49) Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Learn more](https://www.capterra.com/our-story/) * * * Last updated March 13th, 2026 # Reviews of TRAC Ease of use 4.4 Customer Service 4.9 ## Pros and Cons in Reviews JC Jeremy C Information Security OfficerFinancial Services, 11 - 50 employeesUsed the software for: More than 2 years. “Overall it is a good product that helps keep information security tasks up to date and allows for good overall management of IS processes.“ July 11, 2024 MB Maranda B SVP Information ServicesFinancial Services, 51 - 200 employeesUsed the software for: More than 2 years. “There are some small nuances with the system that can cause some pain points with filters, screen refreshes and updates, etc. Also learning where and how to use the system is complex and takes some time.“ June 17, 2024 WC Wade C VP Information SecurityFacilities Services, 201 - 500 employeesUsed the software for: 1-2 years. “The support and documents are regulatory focused which ensures we are implementing policies, programs and procedures based guidelines set by our industries' regulatory bodies, which bodes well when the bank is audited and examined by those regulators.“ September 15, 2023 MF Melinda F ISOBanking, 11 - 50 employeesUsed the software for: More than 2 years. “Permissions are a bit confusing in the implementation.“ August 31, 2023 WC Wade C VP Information SecurityFacilities Services, 201 - 500 employeesUsed the software for: 1-2 years. “The solution is fairly intuitive, and the reporting is great when you need to pull data for management or an executive summary. “ September 15, 2023 MF Melinda F ISOBanking, 11 - 50 employeesUsed the software for: More than 2 years. “If not admin; some users find it difficult to use.“ August 31, 2023 JP Jared P Vice President/ISOBanking, 11 - 50 employeesUsed the software for: More than 2 years. “Nothing is more valuable than time in a community bank when one of the biggest keys is lean operating. “ August 22, 2023 ## Showing most helpful reviews Showing 1-25 of 49 Reviews Sort by: Most Helpful Rating Company Size Reviewer's Role Length of Use Frequency of Use JM Joni M. ISO Banking Used the software for: 6-12 months ### "Get Trac Now!" October 18, 2024 5.0 I love having Trac! I am a newer ISO at this Bank and I felt overwhelmed by the whole Vendor Management task. Trac broke it down for me, helped me go through the process with my 4 most critical Vendors, and showed me what to look for within the SOC Reports. They made it easy!! Pros We needed a simple, effective tool to help us track and risk rate our Vendors, Trac is all of that and more! Cons Some of the questionaires for Contracts and Due Diligence can be lengthy, but they are thorough! Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/)[Venminder](https://www.capterra.com/p/132271/Venminder/) Reason for choosing TRAC installation assistance, simplicity, thoroughness Review Source Response from SBS CyberSecurity October 25, 2024 Thank you for sharing your feedback on TRAC! We're thrilled to hear that it has been a simple and effective tool for tracking and risk rating your vendors. We appreciate your patience with the thorough questionnaires and are glad that TRAC has made the vendor management process easier for you, especially as a newer ISO. Your positive comments about the installation assistance, simplicity, and thoroughness are greatly valued. Thank you for choosing TRAC. ~ The SBS CyberSecurity Team RW Robert W. IT Manager Banking Used the software for: 1-2 years ### "Trac review 101824" October 18, 2024 5.0 I am able to track multiple part of IT I am responsible for in a single pane feel. Pros Easy to use and understand. The multiple solutions share data and interact with each other seamlessly. Cons The login. I like that it remembers most of my login but the Ping is a little much. Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC Cost and support was better with Trac. I believe it was the best solution for the cost. Review Source Response from SBS CyberSecurity October 25, 2024 Thank you for your valuable feedback on TRAC. We appreciate your positive comments on its ease of use and seamless data interaction. We acknowledge your concern about the login process and will consider improvements. Your ability to track multiple IT responsibilities in a single pane is exactly the kind of benefit we aim to provide. We're glad you found TRAC to be the best solution for cost and support. ~ The SBS CyberSecurity Team JR Julie R. Vice President Financial Services Used the software for: 2+ years ### "Trac review" June 11, 2024 4.0 Pros The assistance you receive to use CyberSecurity Cons The fact that sometimes the assistance doesn't truly understand the size of our institution Review Source Response from SBS CyberSecurity June 25, 2024 Thank you so much for your feedback! We will be in touch to better understand the remarks about the size of your institution to see if there is more we can so to help there! TS Trisha S. Operations Systems Administrator Banking Used the software for: 1-2 years ### "Operations Systems Administrator" September 16, 2024 5.0 TRAC has been a great product for our Bank. It has provided us the tools to have a successful Information Security Program. Pros The collaboration between modules has made things more efficient. Cons There isn't anything specific that I can think of. Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC The user friendly functionality. The features the product had with integration. Review Source Response from SBS CyberSecurity October 8, 2024 It's great to hear you find value in our TRAC product and enjoy the integrations the tool provides. Thank you so much for the positive thoughts and feedback. ~ The SBS CyberSecurity Team BK Britney K. Executive Vice President Banking Used the software for: 1-2 years ### "Trac Review" August 9, 2024 5.0 The experience with TRAC and with the staff behind the product has been great. I like that if you have several solutions they will integrate with one another. Pros Ease of use and functionality. We are a small institution and sometimes products are not scalable to our needs. Trac is Cons Would like if Trac would allow for mass upload of documents in Vendor Alternatives considered [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Reason for choosing TRAC Easier to use and setup along with cost considerations. Better customer support Switched from [Ncontracts](https://www.capterra.com/p/233877/Ncontracts/) Easier to use and setup along with cost considerations. Review Source Response from SBS CyberSecurity August 15, 2024 We are happy to hear you are pleased with the ease of use, scalability, and our team members! We appreciate your sharing, too, your desire to have a mass upload feature and this will be shared with our development team. Thank you for taking the time to respond, and thank you for your continued business. We appreciate you. RG Rick G. ISO Banking Used the software for: 2+ years ### "TRAC does not lack" October 18, 2024 5.0 TRAC has met all of our needs over the years. It has impressed our auditors and examiners as a risk management tool. We don't use it to just meet requirements. We truly feel it gives us a validated and accurate risk score which allows us to monitor and manage asset risk. Pros TRAC is customized for financial institution environments. The asset categories, default threats and possible controls are well thought out and appropriate for all situations I've encountered. Cons I'd like to see the reporting have a little more flexibility and customization. Most of the time the canned reports give me what I need but there are some situations where I'd like to customize. Review Source Response from SBS CyberSecurity October 25, 2024 Thank you for your valuable feedback on TRAC. We appreciate your insights and are pleased to hear that TRAC has met your needs and impressed auditors and examiners as a risk management tool. We acknowledge your suggestion for more flexibility and customization in reporting. Our team is committed to continuous improvement and will consider this for future updates. Thanks again, The SBS CyberSecurity TEam ED Ed D. IT Director Banking Used the software for: 2+ years ### "IT Director" October 31, 2024 5.0 Very positive. I was new to the ISO role. This helped me get up to speed. Pros Its intuitive. Makes managing your Info SEC program easier. Cons Still has its fair share of bugs. Lots of times, screens are caching info. Review Source TB Tammy B. VP, Chief Information and Technology Officer Banking Used the software for: 2+ years ### "Citizens Bank of Charleston" January 15, 2025 5.0 Pros Trac is a great tool to assist us in our security needs Cons I don't have a feature that I like the least. Review Source BH Brent H. VP - Risk Officer Banking Used the software for: 2+ years ### "Great RA platform" September 23, 2024 5.0 Overall, the platform is great and easy to use and we have been customers for a decade now with no plans on changing. Pros The TRAC product is easy to use and includes up-to-date and comprehensive information to keep the Risk assessments timely and effective. Cons I cannot figure out how to change the risk mitigation goal percentage for a couple of areas, so that aspect is not the easiest to figure out. This isn't a big deal though. Review Source Response from SBS CyberSecurity October 8, 2024 We so appreciate your remarks on how easy our TRAC product is to use AND for being one of our long-time customers! I'll pass on your comments regarding risk mitigation goal percentages. Our support is always happy to help. Best regards, The SBS CyberSecurity Team AJ Angela J. SVP Asst. Corp. Secretary, IT Manager Banking Used the software for: 2+ years ### "TRAC Review 2024" September 4, 2024 5.0 I use the IT RA and CAT tools. They are great, and the examiners like the reporting I provide them. Pros It is user-friendly. I like that I can add responses to audits for audit tracking. Cons I am pretty happy with the IT RA and CAT tools. I tend to forget how to finalize the IT RA, so I think that could be made easier. Review Source Response from SBS CyberSecurity September 13, 2024 We are so happy to hear you find TRAC to be user-friendly and helpful for audits and action tracking! Your comments regarding finalizing the IT RA have been passed on to our development team. We appreciate your suggestions. We appreciate you and your business! Best Regards, The SBS CyberSecurity Team MM Myriah M. CFO/ISO Financial Services Used the software for: 2+ years ### "$250mm Financial Institution" September 8, 2023 5.0 Pros TRAC has been a really useful tool for our Bank. I really like that the risk assessments are all within their own respective area. It has also assisted us with rewriting policies and continuing to be up-to-date on changes with the use of TRAC's templates. We utilize a consultant, and that has been very beneficial for the first few years in getting everything set-up and to understand what we were doing. Cons TRAC sometimes does not have a logical solution, but customer support is always there to assist and submit recommendations to the developers. The only other thing I can say that I don't like is that it is not consistent throughout the different modules. An example would be that some pages you have to click to save and others automatically save. This can easily be forgotten and work not saved. That is pretty minor when looking at the overall product and what we have gotten out of it though. Review Source Response from SBS CyberSecurity September 11, 2023 We are so glad to hear you find TRAC and our consulting resource to be a valuable tool/resource for your institution. We will pass along your concerns regarding the consistency of autosaving across modules to our development team for consideration. I appreciate your willingness to respond and your transparency. It is much appreciated. Best, The SBS CyberSecurity Team JK Joe K. Information Security Officer Financial Services Used the software for: 2+ years ### "FFB Review" March 4, 2024 5.0 Very good experience. Helps simplify and manage multiple aspects of my role in the bank. Pros Management of ISP is very easy in Trac. Vendor Management is a very large and can be complex project. Trac makes it easy to manage, and present to Examiners and Auditors. Cons Used to be slow, but that has been resolved. No real complaints, the software has really matured into a good product. Review Source Response from SBS CyberSecurity March 5, 2024 We are so excited to hear how TRAC is assisting you with vendor management and also helping you to manage your ISP in general! Equally good to hear the performance issues are cleared up for you. Our development team has worked hard to improve performance and mature the product. It is great feedback to pass along to our internal team. We appreciate you and value your business with us! The SBS CyberSecurity Team MK Max K. Application Security Analyst Banking Used the software for: 2+ years ### "SBS TRAC Continued Use" August 14, 2023 4.0 Support staff makes this product an A+ product and make up for any functionality limitations compared to other competitors. Pros Low cost of the product and ease of use makes this product hard to find anything that compares. Cons Protection Profiles are similar in control sets and no ability to have multiple control response contributors assigned to control sets. Also, no ability to auto answer internal controls. Review Source JP Jared P. Vice President/ISO Banking Used the software for: 2+ years ### "trac" August 22, 2023 5.0 Exceptional. It was a game changer for us! Pros TRAC makes us more efficient in our operations/compliance and gives us back time. Nothing is more valuable than time in a community bank when one of the biggest keys is lean operating. Cons I don't have any complaints. Updating of the product and customer service are all top notch. Review Source JN Jeremy N. Project Specialist Financial Services Used the software for: Less than 6 months ### "Vendor Management " September 20, 2023 5.0 Staying on top of all vendor contracts and needed due diligence docs Pros The different question sets for the VM role are a huge advantage that ensure you are covering all bases. Cons The question sets do not reset each year so it makes it difficult to follow which ones still need to be revisited when you come back to the software to complete them after you’ve left it. Review Source Response from SBS CyberSecurity September 21, 2023 Thank you for outlining the valuable advantages of TRAC's vendor management module! It is good to hear that TRAC VM module is helping you stay on top of your contracts and due diligence documents. We will contact you privately to discuss the challenge with the question sets. This seems like an area to dig into, gather more feedback from you, and consider an enhancement. We appreciate you taking the time to fill out the review! Best, The SBS CyberSecurity Team RR Rebeckah R. Chief Operating Officer Banking Used the software for: 2+ years ### "Trac Information Security and Business Continuity" August 28, 2023 5.0 TRAC makes Risk assessments as easy as they could possibly be. I cannot imagine managing our IS and Business Continuity programs without it. Pros I like the risk rating process, specifically that threats and controls are built into the products. There are many standard Assets that are pre-configured. There are many sample policies and procedures that assist in the implementation. Cons I haven't really used the task management feature, though in a larger institution I could see its benefits. Review Source SR Sarah R. Compliance Officer Banking Used the software for: Less than 6 months ### "Compliance Module Review" August 22, 2023 5.0 The Compliance Module is a wonderful tool for a Compliance Risk Assessment. The way in links industry risks is also a very nice feature. Pros I like the ease of inputting processes and determining the risks. How you input controls to mitigate risks is also a very simple process. Cons There is nothing I dislike about TRAC at this time. Review Source VR Verified Reviewer IT Officer Banking Used the software for: 2+ years ### "TRAC makes Information Security easier" October 31, 2024 5.0 Pros TRAC integrates into our audit process. The modules in TRAC allow us to streamline the process and perform our information security tasks with ease. Cons TRAC has been helpful in many ways. The features provided work well. I have no issues with TRAC. Review Source DH Debra H. Compliance Officer and Internal Auditor Banking Used the software for: 2+ years ### "TRAC Review" August 26, 2024 4.0 I think it is a very good program. It really helps with the audits and findings. Pros The tracking of audit findings and we keep our polices here and it will give us a monthly report to remind us of the next approval date. Cons We use the risk assessments, wish it was easier to use. Review Source Response from SBS CyberSecurity September 4, 2024 We are so glad ot hear you are finding TRAC helpful for your audit findings and policies! Also, appreciate your mentioning ease of use. We are always working toward improving our product and appreciate your candor. JC Jeremy C. Information Security Officer Financial Services Used the software for: 2+ years ### "Trac is a useful tool" July 11, 2024 4.0 Overall it is a good product that helps keep information security tasks up to date and allows for good overall management of IS processes. Pros It's capacity for creating and providing continuous maintenance to FFIEC CAT, IT Risk Assessment and Audit tracking. Cons It's not always easy or intuitive to figure out what you are trying to do. However, support is available and always helpful. Review Source Response from SBS CyberSecurity July 17, 2024 We are grateful to hear that TRAC is assisting you in a variety of ways and that you are finding benefit in TRAC assisting you with the overall management of your IS processes. We appreciate you sharing your expressed concerns on ease of use and we are working on improving in certain areas! So glad to hear our support team is helpful as well! Best, The SBS CyberSecurity Team LA Loni A. SVP Operations IT Banking Used the software for: 2+ years ### "TRAC Review " July 25, 2024 5.0 Great product - easy to use. The report creation allows us to customize our report packets. Pros Tracking of assets, vendors, policy and procedures. Cons Doesn't allow us to upload certain file types. Would be nice if we could use multiple different file types to accommodate some of our files. Review Source Response from SBS CyberSecurity August 2, 2024 Thank you so much for the great feedback. Will check into the file types issue you mentioned and see what we can do! Love hearing you find the product easy to use. Appreciate your business! JB Jeremy B. VP of IT Banking Used the software for: 2+ years ### "Ease of use" July 9, 2024 5.0 Overall, it has been a nice addition to our risk evaluation process. Makes it easy to provide necessary information to BOD, regulators and auditors. Pros \- Regulators seem to accept and like it. - CAT tool integration - Policies templates Cons \- Asset risk evaluation - upload of policy history Reason for choosing TRAC ease of use and consulting. Review Source Response from SBS CyberSecurity July 17, 2024 We are super excited to hear that TRAC has been a nice addition to your risk process and helps you with reporting to the BOD, regulators and auditors. We are happy to hear you are finding our product easy to use. We have made improvements and are continuing to do so! ~ The SBS CyberSecurity Team mB myles B. EVP Banking Used the software for: 2+ years ### "Great Software" June 14, 2024 5.0 Pros Trac makes my job as an executive much easier. We use them for vendor management, FFIEC, Risk Management, BCM, and Cybersecurity Audits and Exam tracking. Our confidence level has greatly increased during NCUA exams since switching to TRAC. Cons Getting a feel for the software can be overwhelming and can take some time. There is definitely a learning curve. Review Source Response from SBS CyberSecurity June 25, 2024 We are happy to hear that TRAC eases your burden and allows you to do your work more easily. We also appreciate your remarks on the learning curve, and we are continuing to improve our self-help within TRAC by providing quick reference guides and workflows to click on to guide you. This is a reminder that we offer free training as well! MB Maranda B. SVP Information Services Financial Services Used the software for: 2+ years ### "Recommend TRAC " June 17, 2024 4.0 Pros All the critical areas are documentation and tracking are thought of. Reporting capabilities are fantastic and templates makes the job much easier. Cons There are some small nuances with the system that can cause some pain points with filters, screen refreshes and updates, etc. Also learning where and how to use the system is complex and takes some time. Review Source Response from SBS CyberSecurity June 25, 2024 We are so grateful to hear that you are finding value in our TRAC product in the areas of documentation and reporting! We will be in touch to schedule a call with you to discuss improvements we can make regarding the pain points you shared. We appreciate your transparency! Also, a quick reminder that we do offer training, self-help, and quick reference guides right in TRAC, and our product trainer is always available to assist should you need refreshers on certain areas of TRAC. We are always happy to help! WC Wade C. VP Information Security Facilities Services Used the software for: 1-2 years ### "Information Security Program, Business Continuity Program, Cybersecure Assess, IT Risk Assess" September 15, 2023 4.0 We are using it for vendor management and to build a new Information Security program for our new bank. The support and documents are regulatory focused which ensures we are implementing policies, programs and procedures based guidelines set by our industries' regulatory bodies, which bodes well when the bank is audited and examined by those regulators. Pros The solution is fairly intuitive, and the reporting is great when you need to pull data for management or an executive summary. Data in the module feeds into other modules, which is great for building policy and program documents and reduces redundancy of data entry. Cons No way to set ticklers for vendor reviews or Action Tracking. Would be great if it could notify whoever's email address is noted when a vendor review is due or when a contract is up for renewal. Also, it would be nice to be able to upload multiple files at once. For example due diligence documents for a vendor. As is you have to upload them one at a time which is tedious. Review Source Response from SBS CyberSecurity September 18, 2023 Thank you so much for your thoughtful responses and for sharing your ideas for things we can consider for improvement! We are happy you are finding value in TRAC and module integration in addition to reporting and how you use TRAC to assist in preparation for regulatory examinations. Regarding the ticklers for vendor reviews and action tracking. This is a current feature in TRAC under Settings. We'll reach out to you privately with details on this feature. We also have an enhancement request in our development area for uploading multiple files. We appreciate your bringing these items up! Best, The SBS CyberSecurity Team ## Send me user reviews about this product ### Fill out the form and we'll send a list of the top-rated software based on real user reviews directly to your inbox. Talk to a Capterra advisor for free and get results within 15 minutes.