GRC360
You may find many digital GRC solutions, but we provide one that runs inside your secure Microsoft 365 platform.
GRC360 is a GRC platform specifically designed to seamlessly integrate with core ITSM records.
This integration is essential because much of what you aim to protect and manage is already handled within your ITSM solution.
Opt out of the classic siloed way of doing things
We are entrepreneurs with solid visions
With GRC360, we aim to achieve two key objectives that will not only add value for you but also steer GRC and ITSM tooling in a fresh direction.
Rather than relying on isolated data for Risk Management and IT Governance, we have developed a data model that integrates ITSM data with GRC practices.
Next, we want to store your critical GRC data inside Microsoft 365 and harness familiar Microsoft tools for working with your GRC practices.
Why integrate ITSM data with GRC practices?
If you are fronting either an NIS2 project or ISO27001, you must have an IT Risk Assessment to be NIS2 or ISO27001 compliant.
This sounds perhaps simple. You can download free Excel-based templates for this work or even find dedicated Risk Assessment tools on the market.
However, you need to enter your data assets or IT systems into this risk assessment very early in the process.
And where do you have this data? In your ITSM solution.
Therefore, modern cybersecurity and GRC practices should integrate real-time data from your ITSM solution to ensure effectiveness and accuracy.
Example of data we connect
The data schema and data model behind GRC360 are designed to collaborate and combine data used by Developers, Operations, and ITsec people.
Examples of the relationships with GRC360 and your ITSM solution:
- IT Contracts, such as data processing agreements, SLA contracts, or similar, and their relationship to IT Services, infrastructure components (CIs)
- Data Processing Activities are linked to operational records of where we process data
- Controlling IT Documentation, such as SOPs, which are linked to the proper context (could be SOP related to the backup service)
There are many examples – meet with us to see how we can organize and structure your GRC practices with the GRC360 solution.
It’s best to keep your cybersecurity documentation for yourself
We have a long track in building business-critical apps inside the Microsoft 365 cloud, where we use the following structure:
- Dedicated apps for process orchestration – use Microsoft Teams or SharePoint as a host for the SPFx app
- SharePoint used as the data source
- Everything is governed and managed by you
Having the data in your Microsoft cloud is not only the most secure approach, but you can also work with document labels and all the other features provided by Microsoft for your GRC practices.
GRC360 App highlights
ISO27001 SOA
The Statement of Applicability feature in GRC360 enables you to organize your ISO controls into comprehensive records, moving away from the limitations of Excel.
IT Risk Assessment
Create and work with Risk Assessments with GRC360, including relationships to services, stakeholders, information assets + use of threat/vulnerability catalog.
Information Assets
Build, structure, and enhance your information asset repository by seamlessly associating and directly linking it to core IT systems using GRC360.
IT Contract Management
Contract management, including DPA, NDA, and SLA, plays a crucial role in your IT governance.
Capability to cross-link relevant parts of your IT landscape while integrating essential document features seamlessly.
Data Processing Activity · GDPR
Automate and smoothly manage DSAR processes, along with Article 30 compliance, seamlessly integrated with your information systems.
Controlling IT Documentation
Separate your IT documentation into controlling documents and specific IT resources.
With GRC360, you can easily create custom categories for controlling components, as well as manage related documentation seamlessly.
Scheduled Operations
GRC360 allows you to map and organize your critical recurring operations and connect them to your operational stack.
The transformation from definition to the task or to Microsoft Planner is also part of the GRC360 features.
Cybersecurity Event and Incident
GRC360 and ITSM360 will serve as the necessary NIS2 Security Incident Reporting platforms, with all the ticketing features needed to work with cybersecurity incidents.
Power BI Reports
Use our pre-defined Power BI reports, or build your reports by a simple OData query from Power BI to the data source in SharePoint.
