SecureAware is an ll-in-one IT GRC management system that manages policies, IT controls and risk information that are in disparate locations throughout the enterprise. It creates continuos compliance by automating risk management and plan-do-check-act processes in an ISMS as defined in ISO 27001. The IT GRC package contains all the SecureAware modules that can also be purchased individually to address your most pressing IT GRC challenges. SecureAware is delivered as software or Software as a Service (SaaS).
Key Features
- ISO 27001 ISMS, Plan-Do-Check-Act process and Statement of Applicability
- IT Risk Management in accordance with ISO 27005 and NIST SP800-37
- Business Continuity Planning According to BS 25999
- PCI DSS compliance
- Cloud vendor assessments based on Cloud Security Alliance GRC Stack
- Cobit control objective mapping
- Manage recurring compliance activities
- Policy and security awareness management
- Time saving templates for security policies, business continuity plans and threat catalogue
- Smartupgrade ensures easy access to future features and content updates
- APIs
- Runs on several SQL databases
- MS Active Directory support with users and groups
- Delivered as SaaS or on-premise software
