Solution

Meeting your customer oriented strategy and goals

Managed Control Library

The managed control library allows audits and assessments to be approached from a variety of perspectives. Topic-specific, organizational or standard-related audits, assessments or templates can be created without great effort. The audit level can be determined by selecting the appropriate controls (high-level/deep dive). A big advantage is, that additional controls can be created or existing controls can be easily adapted.

Covering control requirements from international standards

360inControl Solution Roadmap

GDPR (General Data Protection Regulation)
COBIT 5.0 Process Reference Guide
ISO27001: 2013
ISO27002: 2013
ISO27005: 2011 Risk Management
CIS Controls V 7.0
OWASP Top 10: 2017
NEW

Data Protection Impact Assessment (DPIA)
SANS Critical Security Controls 6.0 - Quick Check
ITIL
Business Principles for Countering Bribery, Transparency International 3rd edition 2013
NEW
PCI DSS V 3.2
work in progress

Benefits from using 360inControl

Increasing value for your business and your customers
Management of digitalisation and its transformation
Mapping and implementation of growing requirements in certifications, regulations, laws etc.
Generating higher transparency and increase collaboration
One solution covering multiple tools
Cost efficient solution

360inControl Solution Roadmap

Functionality

Controls contribute to safety

bilder-Solution-845x321Zeichenfläche-1-Kopie-2

Controls serve as trailblazers

Control Library

Key business areas, IT service management levels and mapping to international standards
Detailed description, recommended testing evidence and justification
Assignment to functional and industrial scope and asset categorie(s)
Applicability of successive maturity levels per control (MME)
Possibility to create audit/assessment or template out of Control Library…

Inventory

Centralization of information assets
Assignment of responsibilities (Ownership)
Classification of Information (Confidentiality, Integrity, Availability)
Definition of Data Privacy relevance
Identification of Regulatory relevance (Multiple)
Assignment of retention period
Linkage of related Risks, Action Items, Audits/Assessments
Fulfillment of regulatory & legal requirements (e.g. Art. 30 GDPR)

Knowing what you own and how it is classified helps to use resources wisely

MANAGE TEMPLATES
AND SCHEDULES

bilder-Solution-845x321Zeichenfläche-1-Kopie-3

Templates

Create and manage templates for Audits & Assessments
Plan recurring Audits & Assessment

Audits and Assessments

Planning, execution & monitoring
Organisational allocation to business processes, functions, information, assets and more
Smart assignment of work packages to assessors
Scheduling recurring audit & assessments
Creation of templates
Usage of managed control library
Easy selection of controls in scope
Pro-active action item management
Direct and customisable reporting

Every challenge can be mastered

bilder-Solution-845x321Zeichenfläche-1-Kopie

Audit/Assessment Report Example

Audit/Assessment Videos

Management of improvements and corrective actions

Action Items

Creation of Action Items directly from a specific area (e.g. audit) or in the module Action Item
Retention of the source from where the action item was created
Restriction of access per Action Item
Traceability through the Audit Trail
Possibility to attach files and enter links e.g. JIRA

FAQ

If I am missing a standard in 360inControl® – what can I do?

Option1: you enter the standard information in the tool and map the controls yourself. Please ensure that there is no copyright infringement.

Option2: inform us about the standard you are looking for. We may have already included this standard in our Roadmap.

Categories: Functionality, Standards

Permalink