The SeCube COMPLIANCE module is a software component that supports audit-type activities.
Compliance and Audit support
Using the Compliance module ensures compliance with numerous predefined international information security standards and regulations, freely arranged company regulations and audit requirement catalogues can be examined, administered, and regularly revised (internal audit), and a planned management of findings can be implemented. As a result of the compliance checks and audits, detailed compliance and audit reports can be made, along with action plans for deficiencies.
Audit Packages and Methodology
Requirement lists and audit packages initiated in the compliance module can be freely configured:
- Custom requirement lists can be created as needed, such as corporate or parent company requirements and policies; information security policies, supplier requirements, audit requirements, etc.
- Template requirement packages are also available (legal requirements, EU regulations, standards), and the manufacturer’s product support ensures that changes are tracked.
- ISO/IEC, NIST
- GDPR, CER, AI Act, NIS2
- DORA, RTS, Swift,
- VDA, ISA, Tisax
- National legislations
Methodological parameters supporting various functionalities can be configured for the audit package:
- Simple compliance or audit review
- Reviews performed simultaneously on multiple resources/entities
- Requirement relevance settings
- Fixed methodologies aligned with supported regulatory requirements and laws—with results ready for regulatory authorities and audits
Compliance and Audit Evaluation
These assessments means the systematic evaluation (based on methodological parameters) of compliance requirements contained in each audit package.
- Multiple independent audit and compliance packages can be run simultaneously
- Mapping between different requirement catalogs
- Conducting internal audits
- Grouping options optimized for the mass evaluation of a large number of resources / EIRs
- Management of deficiencies and findings
- Management of safeguards and controls
- Management of evidence and documents
- Validation checks ensure the consistency of evaluations
- Assignable evaluator permissions
- Evaluation functions and generation of Audit / Compliance report
Cybersecurity Regulatory Compliance (NIS2)
Support of national local use cases for the NIS2 directive with regulatory-compliant and audit-ready exports.
Integrated and continuous management of audit deviations
- We can plan corrective actions for findings identified during audits, integrated into every ongoing audit and compliance package.
- Responsible parties and statuses can be assigned to these actions, along with email reminders.
- The results of these actions can be continuously tracked and linked back to the audit packages, thereby supporting the organization’s ongoing compliance management.
- Based on the evaluation data and action statuses, detailed past, current, and future reports can be generated regarding our organization’s compliance status.
Compliance and Audit results
- Audit, compliance, and GAP analysis reports; Audit reports; Applicability reports
- Action plans; current and future reports
- Generation of a system security plan
