Regulatory applicability
?
Which laws, regulations and standards apply to your organization, and why. Worked out from the company profile; a CISO can set any framework in or out of scope by hand under Settings.
Financial risk by regulation
?
An indicative, theoretical figure: each regulation's maximum fine (calculated from global turnover where the law sets a percentage), adjusted for the assessed level of control implementation from the GAP analysis and completed roadmap work. At 75% implementation, 25% of the maximum remains as residual exposure. Current evidence showing that a control is effective also counts as implemented. Authorities rarely impose the maximum, and fines for a single incident are rarely cumulative.
Company profile
?
Answers drive which frameworks apply and the maximum fines. Only a CISO can change them.
Fill from public sources
Reads the company website and the public company register, then suggests answers with their source. Nothing changes until you confirm it.
This workspace has no internet access. Upload saved web pages (HTML) or a register extract (PDF) instead; they are read here and nothing leaves the workspace.
Organizational information
Documents about your company itself, such as the annual report, an organisation chart or a registry extract. They are kept in the Document vault, encrypted like your policies, and read by the analysis as company information, not as policy.