Framework Management
ISMS
Framework Management
Assess your organisation against recognised security standards and maintain a clear overview of where you are compliant and where improvements are still needed.
Questions about framework management?Contact us →
What is a compliance framework?
A compliance framework is a collection of requirements against which your organisation can be assessed. Examples include:
- ISO 27001, the international standard for information security
- NEN 7510, specifically focused on information security in healthcare
- And other frameworks relevant to your sector
Each standard consists of its own set of controls and policy components on which you are assessed.
The policy and control audit
With this audit, you verify whether your policies and controls actually comply with the chosen framework, rather than simply assuming so on paper.
How the assessment works
- Select the framework you wish to assess against
- Assign a contact person to perform this task
- Evaluate per requirement whether your policies and measures comply
- See at a glance where you are already compliant and where action is still required
Linked to other features
Policy Management
The policies you assess are recorded in Policy Management.
Controls
The measures you assess are drawn from Controls.