The engine for your information security management system (ISMS)

The HiScout ISM module is geared toward meeting the requirements of the ISO 27000 series of international standards, and provides a reliable basis for the information management system’s control loop. HiScout not only focuses on the documentation of output, but also supports users through the automation and standardization of complex and distributed security processes in daily operations.

Tab-ISM

Services

• IT risk management related to security objectives
  • Selectable threat and vulnerability catalogs
  • Assessment based on aspects of the threat, vulnerabilities and response levels
• Complete mapping of the audit (and self-assessment) process (from planning to addressing the findings) with users free to manage the tested requirements as they wish
• Centralized monitoring of actions (process support, evaluation of implementation statuses and origin for management purposes, assessment of impending actions)
• Procedural mapping of security considerations and action to be taken
• Practice-related mapping and cross-references between your specific requirements
  • ISO/IEC 27001/2
  • COBIT
  • BSI IT-Grundschutz
• Problem-free integration and management of your specific requirements (ISO, SOX, Euro-SOX, BaFin)
• Contains the complete HiScout Grundschutz module
• Aggregrating reports prepared for management at the touch of a button
• Clear and intuitive ISM cockpit for a quick overview of the current status of the management system

Benefits

• Objective-oriented interfaces and smoothly integrated reporting of every work phase saves time and improves transparency.
• The clearly structured ISM module not only provides a basis for the desired certification or re-certification, but also makes your management system transparent and quantifiable.
• HiScout ISM relieves you of time-consuming administrative activities, such as the maintenance, merging and aggregation of information in/from different pools of data, and gives you the space you need to be able to constantly improve your company’s security level.

Functions

• Support for operational processes with the integrated Business Logic Engine and role-specific work areas
• Complete user freedom with the underlying data model and therefore the option of easily integrating other leading systems.
• Work areas can be created, modified and sent via direct link.
• Each HiScout module contains the complete data model, so BCM or service management data can also be managed within the module.
• Clear and intuitive cockpits for a quick overview of the overall status
• Audit-proof data management
• Autonomous definition of analyses in table form, which can be sent as a link or exported to Excel.
• Import from Office products
• Live and direct preview of reports in the work views
• Reports for management purposes can be created with the integration of a leading report engine with WYSIWYG editor.
• Compatible or convertible risk analysis methodology

Unique features

• Support for all operational aspects of an IS management system, not only in risk analysis or the documentation of results
• Complete flexibility of the data model thanks to the generic platform
• Complete data model for all GRC-related topics
• Customization of work views to suit your own preferences
• Analysis of data with transfer to Excel
• Any languages can be integrated
• Customer involvement in the prioritization of development topics
• Generic interface technology to allow for further systems to be connected (e.g. process tools, CMDB) without programming knowledge
• User management with authentication using Windows credentials and potential connection to the active directory

Operation

• Company-wide license model
• Available in German and English
• Browser-based multi-user application
• No installation on the client’s side required
• Freely configurable data model
• Individual role and rights management
• Code-free generation of application-specific views
• XML interface for a wide range of import and export options
• Integration of documents and structured data
• Extensive reporting functions
• Audit compliance thanks to versioning, archiving and release processes
• Search function, including full-text search, in uploaded documents
• Can be expanded as an integrated management system based on the same data model and identical company master data.
• HiScout customer support with in-house employees
• Software development – 100% “Made in Germany”