Integrate your management system and GRC

You can automatically manage GRC compliance during ISO 27001 compliance process. ISMS Manager software automatically maps all low level controls to GRC requirements..

Here are the GRC defaults in our Software:

Legal / Regulatory Compliance

• • ISO/IEC 27017:2015 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services
  • F1 - FEDRAMP LOW
  • F2 - FEDRAMP MED
  • FISMA - Federal Information Security Management Act
  • GLBA - Gramm-Leach-Bliley Act (Safeguards Rule)
  • HIPAA/HITECH - Health Insurance Portability and Accountability Act
  • NIST 800-53 Recommended security controls
  • Add your own Legal / Regulatory Compliance Requirements

Contractual Compliance

• • COB - COBIT 5.1
  • PCI/DSS - Payment Card Industry Data Security Standard
  • SOC 2/3 - Service Organization Controls (Security, Availability, Processing, Integrity, Confidentiality, Privacy)
  • Add your own Contractual Compliance Requirements