Module · IT risk management (ISO 27005)
IT risk management (ISO 27005)
From an Excel risk register to an auditable ISMS.
grc.deveca.app
What this module does
Full risk lifecycle: identification, assessment, treatment, review. Configurable matrix, escalation routes and mapping to ISO 27001, TISAX, NIS2 and BSI.
Capabilities
- Risk register with matrix, thresholds and escalation
- Threat and vulnerability catalogues
- Risk exceptions with an approval workflow
- Risk history, comments and tasks