ESM

ESM is a digital management system for information security and compliance. It brings security, privacy, business continuity and risk assessment together in one visual tool. The approach is to state a requirement once and measure compliance against many standards.

Main features

• Multi-standard support: works with ISO 27000 standards, NIST, PCI-DSS, EBA and EIOPA ICT guidelines in parallel.
• Privacy and GDPR: includes a dynamic register for Article 30 and support for ISO 27701.
• Statement of applicability: keeps one for each standard, easy to update.
• Internal control: manages internal audit and control activities.
• Supplier control: checks suppliers on security, continuity, ICT compliance and personal data.
• Compliance reports: covers requirements and the security architecture.

Customers and markets

Regulated organisations, including financial firms covered by Swedish supervisory rules.

Key facts

• Standards: ISO/IEC 27001, 27002, 27005, 27031, 27701
• Custom standards: users can import their own