ISMS operations with organisational structure, BIA, incident management, asset inventory, dual risk assessment, measure tracking and Statement of Applicability — in one platform, sharing data with BCM, TPRM and Assessment. Hosted in Germany.
Request an ISMS module demoThe ISMS module implements ISO 27001:2022 as an operating system. No Excel spreadsheet, no Word manual, no consultant-hour model for routine maintenance.
Scope, roles, ISMS committee, responsibility matrix. Default templates per ISO 27001:2022 or customisable to existing organisational charts.
Assets, asset owners, data classification, dependencies across applications, servers and suppliers. Cross-module data flow to BCM (BIA) and TPRM (supplier risk).
Inherent vs. residual risk with measure linkage. Likelihood and impact per customer-specific matrix. Acceptance workflow with four-eyes principle.
ISO 27001 Annex A controls from assessments or audits, measure maintenance, deadline and responsibility tracking. Statement of Applicability auto-generated.
Incident registration, classification, escalation. GDPR 72-hour deadline, NIS-2 reporting obligations (24h early warning, 72h incident report, one-month final report), KRITIS reports. Templates with data fields for the responsible authorities.
Auto-populated KPIs from live ISMS operations. Templates for board reporting, supervisory board, auditors and insurers. Snapshots for auditors with revision-safe versioning.
The ISMS module covers the ISO 27001 family and integrates the complementary standards relevant for DACH. No fragmented multi-tool architecture.
Three constellations in which the ISMS module replaces the Excel-Word-SharePoint approach economically.
200 to 500 employees, NIS-2 affected, wants to certify rather than just be compliant. ISMS module plus vCISO as adoption path. Audit-ready in 6 to 9 months, ongoing operation via the platform.
Existing Excel/Word/SharePoint solution grown organically, multi-site hard to map, auditors challenge revision safety. Migration via the Assessment module: existing controls imported, gaps flagged, maintenance from day 1 in the platform.
vCISO consultancies with 5 to 30 clients need multi-tenancy without mixing data. ISMS module with strict tenant isolation, RBAC for cross-client consultant view, without cross-contamination.
The ISMS module shares the data layer, permission model and audit trail with the BCM module (Business Continuity, ISO 22301), TPRM (Third-Party Risk Management per EBA) and Assessment (OSCAL import). There are no mandatory modules: licensing is modular, modules build on each other without forcing each other.
See the full platformMemberships, programmes and partnerships
