Control management

Management systems related to information security and data protection focus on the management of risks. To modify and reduce risks, most standards require you to implement controls. Bizoneo includes the functionality to manage your controls with full integration into the platform.

Key Features

Controls

• Ability to import suggested or mandatory controls of popular standards (ISO27001, ISO27701, NIST CSF, NIST PF, PCI DSS)
• Ability to create custom controls
• Ability to add further compliance systems
• Ability to link controls to specific standards or frameworks
• Ability to link controls to non-conformities, incident, breaches and risks

Reports

• Ability to create a Statement of Applicability for ISO27001 & ISO 27701 compliance
• Export a top-level overview of all controls (without the specific ISO27k context)