Record of Controls and Safeguards
We can maintain a record of our safeguards and controls, which we can evaluate during internal audits, map to compliance requirements, and use as safeguards during risk assessments.
Internal Audit and Compliance
SeCube’s Compliance module is designed to support a company’s audit-related activities. The Compliance module supports the assessment, administration, and regular review (internal audit) of compliance with numerous predefined international information security standards, legal regulations, and custom-configurable corporate policies and audit requirement catalogs, as well as the planned management of non-conformities. Based on the results of these assessments, we can prepare detailed compliance and audit reports, as well as action plans to address any deficiencies.
Supported Activities:
- Compliance and audit planning and assessments against laws, standards, and internal requirement catalogs
- Integrated and continuous management of deficiencies and nonconformities
Audit Planning, Evaluation, and Remediation
Requirement lists and audit packages initiated in the compliance module can be freely customized:
- Custom requirement lists can be created as needed (e.g., corporate or parent company requirements, policies; information security policies, supplier requirements, audit requirements, etc.)
- Template requirement packages are also available (legal requirements, standards, 40+ packages)
Multiple audit packages can be planned and run simultaneously. They can be organized according to an audit plan.
Audit packages can be assigned to responsible parties and evaluators. During the evaluation, we can record controls, evidence, and deficiencies with configurable classifications. Analytical reports and exports are available based on the evaluation results, including a comprehensive Audit report.
We can plan and track the resolution of findings, deficiencies, and discrepancies identified during audits using integrated task management functions. The results of corrective actions can be fed back into the audit packages, thereby supporting continuous compliance management for the organization.
Based on the evaluation data and the status of corrective actions, detailed historical, current, and future reports can be generated regarding our organization’s compliance status.
We can regularly review compliance with requirements, conduct periodic audits, and store audit results.
Audit Results:
- Audit, compliance, and GAP analysis reports; Audit reports
- Nonconformity reports
- Action plans and current and future reports
