Governance, Risk, and Compliance – GRC

Our GRC360 add-on app is breaking down the barriers separating IT Sec/Governance from the true IT environment.

Experience a seamless merge between these critical components of your organization with our innovative solution.

• Connects to your IT Services and CIs
• Works in Teams – stores all documentation in SharePoint
• Share IT Governance documentation with relevant stakeholders

Introducing GRC, our newest application that integrates IT Service Management and IT Security into one seamless product. This innovative and exciting app is now available to all ITSM360 customers.

We unveiled GRC in May 2023 and are proud to offer an impressive set of comprehensive features, combined with ambitious plans for future development.

Join us on this exciting journey towards unified IT operations with GRC.

In today’s business landscape, your IT Service Portfolio must be aligned with your data processing activities and business processes. 

While C-level executives outside of IT may not be interested in your IT Services specifically, they are focused on optimizing their processes.

By linking your services to a robust data and business process repository, your IT organization can position itself competitively and earn the trust of business stakeholders.

GRC360 gives you the following:

• List your processes, including relevant metadata such as legal basis, retention period, and why and how you process these data
• Associations to IT Services or IT Systems, documentation, and relevant stakeholders
• Collaboration features such as email and notes
• A SharePoint document folder/library for storing process documentation

IT documentation is a crucial component of our ITSM360 solution, developed as a native M365 app with various options, including SharePoint document libraries integrated into our design.

Introducing our GRC360 release, where we expand our IT documentation approach, supporting two types of IT documentation:

• Specific IT documentation, which pertains to a particular service or CI. Typically, it is present within the CMDB scope and is very mature in the ITSM360 solution.

• Controlling IT documentation, which could be a backup instruction or guideline related to multiple CIs, services, or even a CI class.

Our new GRC360 app accommodates managing controlling IT documentation:

• Create your custom controlling areas for IT documentation such as SOP, IT standard, Procedure, Manual or similar
• Document Management Capabilities such as document templates, next review features, lifecycle management
• Associations to IT Services or IT Systems, documentation, and relevant stakeholders
• Collaboration features such as email and notes
• Compliance report in Power BI

IT Documentation Dashboard in PowerBI

Link to live report ->

Managing IT regulatory compliance can be overwhelming with numerous documents, tasks, and objectives to handle.

However, the GRC360 Framework Manager simplifies this process by enabling an organized framework management, including creating sub-frameworks/practices or chapters.

Furthermore, the standard feature includes document management that makes working with a specific framework seamless in GRC360.

Improve your IT regulatory compliance management with GRC360 Framework Manager.

The GRC360 app stands out not because of a new risk management process but because it connects directly to your Configuration Items and Services.

This innovative feature sets it apart from other apps in the market.

The risk features include:

• Threat register
• Link mitigation/safeguards to threats (for example, an antivirus solution is already a CI/Service) that are linked to the threat lower the impact of this threat
• Link mitigation contracts to threats
• Threat value before and after mitigation effort
• Risk assessment 
• Collaboration features
• Document Management capabilitites

The IT control section in GRC360 seamlessly integrates with the ITSM360 CMDB/Service Portfolio features.

This enables your operations team to efficiently manage related tasks and actions pertaining to IT controls.

Controls can be readily mapped to your infrastructure, empowering your team to work smarter, not harder.