Create a scope document, with all the necessary required elements captured in a pre-defined customizable template

Create an asset register, with proper ownership and classification defined as per best practices

Carry out a vulnerability assessment - very extensive checklists are provided to help you do this comprehensively

Assess your risks and build the risk mitigation strategies. A comprehensive threat-vulnerability database is provided, to which you have the flexibility to add your own entries as well. The risk assessment module is linked automatically with your asset register

Select your controls from the Standard, using simple drop-down boxes, and create your Statement of Applicability. The SOA is linked automatically to the risk assessment results, thus ensuring a key requirement of the Standard - clear linkage between the risk assessment and selected controls - is met.

Quickly create a standard set of security policies and procedures from pre-defined templates

Select the controls which you would like to measure as part of the metrics requirement using another easy-to-use template

Ensure proper control of documents and records with the document and records master list