STANDARDS & CERTIFICATION SYSTEMS.
GRC CORA supports companies and organizations in the process of certification to ISO standards (HLS structure – such as ISO27001, ISO9001, ISO14001 etc.), Reference Practices (such as UNI:PdR43, Pdr125 etc…).
Your opinions
Some of our customers
The main
features.
GRC CORA is modular and configurable based on the characteristics of each individual organization.
- REGISTER OF PROCESSES AND SERVICES
Create and maintain the register of processes and services, manage roles and responsibilities, identify assets and related risks.
- RISK MANAGEMENT
Identify threats to your organization and assets. Identify appropriate security measures to combat threats and analyze what the residual risk is.
- PIANO DI TRATTAMENTO DEI RISCHI
At the end of the risk assessment process, any residual risks whose value is higher than the risk appetite can be treated with a specific treatment plan (mitigation actions, transfer, etc…).
- AUDIT PROCESS
Schedule, plan and carry out audits, print the calendar, send invitations to the subjects involved and collect the evidence.
- SURVEY MANAGEMENT
Identify incidents, non-conformities and ideas for improvement, assign each event to an owner and identify the application of specific corrective actions.
- REPORTING
Generates list and detailed reports for each functionality, useful both in the operational phase and in the certification phase with third-party bodies.
- BIA (BUSINESS IMPACT ANALYSIS)
Easily carry out a BIA (Business Impact Analysis) on each process / service and analyze the economic value related to your residual risk.
- 27001 MODULE - SOA (STATEMENT OF APPLICABILITY)
Manage and generate the SOA, mandatory documented information required by ISO/IEC 27001:2022 which lists the security measures of ISO/IEC 27002:2022 with information on whether or not the organization applies it. Analyze in depth which threats are countered by adopting certain security measures
Not only
software.
Do you need a consultant to follow you in your activities?
Are you looking for specialized and specialized training courses?
REGULATORY
consultancy.
Our team is made up of extremely specialized resources, with high experience in the field and constantly updated and trained to offer the best consultancy.
TRAINING
in classroom & online.
Our team is made up of extremely specialized resources, with high experience in the field and constantly updated and trained to offer the best consultancy.
SUPPORT
in certification phase.
We support and guide companies towards obtaining various ISO standards (27001 with application of guidelines 27017 and 27018, 9001 etc…) and PdR (UNI:Pdr43, PdR125 etc…)
