Price plans that flex to your way of working

Start with Essential:

• Controls Structure (Reg & Op)
• Control Self Assessment
• Regulations and Control Mapping (SCF)
• IT Compliance Risk Assessment

All the benefits of Essential, plus:

• Control Design & Operating Test
• Policy Management
• Key Control Indicators (KCI)
• Compliance Breaches
• Control Test Plans

All the benefits of Business, plus:

• Test Scheduling
• Advanced Control Indicators

Start with Essential:

• Risk Register
• Risk Assessment (ISO 31000)

All the benefits of Essential, plus:

• Risk Hierarchy/Taxonomy
• Risk Rollup
• Risk Themes
• Board Risks & Risk Library
• Key Risk Indicators (KRI)

All the benefits of Business, plus:

• Loss/Risk Events
• Risk Scheduling
• Advanced Risk Indicators

Start with Essential:

• Risk Register
• Risk Assessment (ISO 27005)

All the benefits of Essential, plus:

• JIRA/ServiceNow Workflow Integration (coming soon)
• Threat & Vulnerability Library
• Vulnerability Management
• Incident Management
• Key Indicators (IT Risk)

All the benefits of Business, plus:

• ServiceNow Integration (CMDB)
  
• Advanced Indicators (IT Risk)

Start with Essential:

• Vendor Register – 100*
• TPRM Assessment – External

All the benefits of Essential, plus:

• Vendor Register – 500*
• JIRA/ServiceNow Workflow Integration (coming soon)
• BitSight Integration
• Key Indicators (VRM)

All the benefits of Business, plus:

• Vendor Register – Unlimited
• Contract Manager
• BitSight Rules Engine
• Advanced Indicators (VRM)

Start with Essential:

• GDPR Discovery Workshop
• GDPR Process Discovery
• Programme Tracker

All the benefits of Essential, plus:

• Data Protection Impact Assessments
• Data Transfers
• Data Breaches

All the benefits of Business, plus:

• Subject Access Requests
• Regulation Mapping
• ServiceNow Integration (CMDB)

Gain control of your SMCR Requirements.

• Legal Entity Register
• Roles & Responsibility
• Conduct Rules
• SMCR Breach Register

Simplify your ISO 27001 journey.

• ISMS Programme Tracker
• Objectives and Clauses
• Performance Metrics
• Statement of Applicability

Meet PCI DSS requirements.

• PCI Self Assessment Questionnaire
• (SAQ – A, -EP, B, B-IP, C, C-VT, D Merchant, D Service Provider and P2PE-HW)
• RoC – Report on Compliance

Gain clarity and oversight of your IRAM2 programme.

• IRAM Process; Scoping, BIA, Threat Profiling
• Vulnerability Assessment
• Risk Evaluation and Treatment

Achieve clarity and oversight, focus on where it matters.

• Vulnerability List
• Vulnerability Summary
• Vulnerability Remediation