Change Management tracks Segregation of Duties (A.5.3) based on who creates the ticket and who approves it. Change Management (A.8.32) Module and Project Management (A.5.8). This module also takes care of Planning of Changes (Cl. 6.3).

A.5.8: Information security in project management A.8.29: Security Testing in Development and Acceptance A.8.26: Application Security Requirement .

5.19: Information Security in supplier relationship is done by completing supplier questionnaire 5.21: ICT is considered as one of the supplier types 5.23: Cloud services is considered as one of the supplier types and for which “Exit Planning” is done. .

Supplier rating can be captured for a specific period .

Supplier Risk Assessment can be done .

Onboarding checklist documents

6.1 Background screening

6.2 Terms and Conditions

6.3 Completion of Information security training

6.6: NDA

Offboarding checklist

(A.6.5) documents

Asset Return

Badge Return

Access Revoke

Offboarding checklist

(A.6.5) documents

Asset Return

Badge Return

Access Revoke

Offboarding checklist

(A.6.5) documents

Asset Return

Badge Return

Access Revoke

Job Description

Organization Structure

Scope

Employee management

You can edit the current SOA to come up with the new version. Old versions are maintained

It allows you to define

Confidentiality

Availability

for each Asset Type which allows to calculate the Risk Impact

Preventive Action

Confidentiality

Availability

Preventive Action Task Tracking

You can print the Risk Register in Excel

Data from previous risk assessment is imported to review the new situation. It allows you to edit the data to come up with the new risk register for the new period

Preventive action is initiated through risk mitigation

In alignment with new standard

Like Corrective action it is also tracked through completion

Employee Management

Training

Communication

Documents Access control.

Document changes through proper review-approval process. Provision for External Review/ approvals.

Publish Documents for authorized users.

Keep Source Documents untouched through version control.

Move old Documents to Archive folder.

Obsolete Documents can be retired.

Maintain Document Change History.

Create and manage Document Templates

Assign Document Templates to create new document

Document Manager will have a list view of all documents & document templates, change (New / Change) requests.

Document manager can publish documents. Can also upload existing documents.

Document Manager can assign create / change document task selecting reviewers and approvers.

Document Manager can track and manage tasks through workflow

Review and approval of documents are documented with time stamp

Version control is maintained

Adding Checklist Questions

There are pre set questions for each clause and each control. You can add more questions

Clause10.0 Improvement

Incident Management

Quick Fix and Corrective Action

Improvement

Manager can view detail information of an issue

Can tag with other issue

Can assign Quick Fix analysis and manage tasks

Can create and assign Corrective Action and manage tasks

Can do the Root Cause Analysis (RCA) for Corrective Action / Preventive Action using tools like Cause & Effect, 5 Why Analysis etc.

Issue is defined through 5W & 1H technique

Root cause analysis

5 why analysis

Cause & effect analysise

Captures source of improvement

QC Tools for data analysis

Documents Cost Benefit analysis

Provides statistics on benefit due to improvement initiatives

Manager can view detail information of a suggestion for Improvement. Also can assign Cost & Benefit Analysis with Data analysis. Can manage analysis and tasks.

Manage your processes, procedures, work instructions and maintain relations