Information Security Risk Manager

SoftComply Information Security Risk Manager supports your compliance journey towards the ISO/IEC 27001.

Track Progress of ISO 27001 Compliance

Manage and monitor your compliance progress in the InfoSec Dashboard by following the provided checklist of 27001 requirements.

Speed up your ISO 27001 Compliance Management

Choose the ready-made templates for ISO 27001 like the asset-based risk management table, tailored risk model and built in 27001 libraries of controls, assets and vulnerabilities.

Enjoy Automated Traceability of Assets, Controls & Risks

Full traceability between Assets, Risks and Controls is built automatically as you manage your Information Security Risks. Risk Dashboard includes the Coverage reports between Controls, Risks and Assets in a Traceability Matrix.

Why use SoftComply plugins

No more Disconnected Data

Manage your information security where the rest of your team is at. Manage assets, risks and apply controls with this Information Security Risk Manager app in Jira.

Dedicated Interface

Afraid to get lost in Jira complexities? We've got you: the Information Security Risk Manager has a dedicated and easy-to-use interface built on top of Jira!

Quick Onboarding

Start with the dedicated risk management templates for ISO 27001 compliance like the asset-based risk register and risk model templates. All templates are fully customisable.

Track progress against ISO 27001

The app has a built-in checklist for ISO 27001 that helps monitor progress against the requirements. It also provides a traceability coverage view to ensure that all assets have been defined, risks analysed and controls applied as needed.

Automated SoA

You can generate the Statement of Applicability automatically from the app.

Built in library of ISO 27001 controls, assets and vulnerabilities

SoftComply Information Security Risk Manager comes with library of controls, assets and vulnerabilities that you can use when managing your information security risks.

See Information Security Risk Manager in action

What our clients say

Static Snapshots is a very good app!

The app allows to freeze the content of a page in Confluence, and as another user pointed out, is especially useful in freezing content from external sources (like Jira tickets).

QA
Agustin Alarcon
Software QA Engineer

The report and plans of Validation for Confluence app are great!

The topic of sofware validation for medical devices is not an easy step in setting up the QMS, there seems to be comparably little actual information available on how to go about things the “right” way. There’s some good lessons in your planning and reporting.

CC
Ronny Eichler
ConnCons GmbH

Automated tools validation for our eQMS in the cloud? Yes please

This addon aligns perfectly with the work my organization is doing with AAMI to help drive the acceptance and safety of modern technology in the regulated medical device space. Using automated validation means we don’t need to spend resource time on manually testing and keeping our Jira and Confluence tools in a validated state.

OG
Melissa Gill
Orthogonal

Pricing

$2900/year

Price in USD

Atlassian fees also apply

Resources

We have an extensive set of Knowledge Base articles about customisation and additional automation for the Risk Manager apps.

You are welcome to BOOK A DEMO call to learn more about the Information Security Risk Manager.

There are a number of differences between the 3 Risk Manager apps offered by SoftComply. You can read the comparison between them here.

To summarise, the SoftComply Information Risk Manager is a subset of the Risk Manager Plus, i.e. functionality of the Information Security Risk Manager is included in the Risk Manager Plus.

The Risk Manager Plus is more scaleable than the InfoSec Risk Manager, e.g.:

  • You can customize Risk Models in the Information Security Risk Manager but you can’t add new Risk Models in the app. You can do that in the Risk Manager Plus app.
  • You can customize the Object Registers in the Information Security Risk Manager but you can’t create new ones in the app. You can build new Object Registers in the Risk Manager app though.
  • You have 2 sheets in the Risk Table that you can customize in the Information Security Risk Manager but you can’t create more Table sheets in the app. You can create any number of sheets for the Risk Tables in the Risk Manager Plus app.

To learn how to assign fields to Risk Table columns in the Information Security Risk Manager, please continue reading the tutorial here.

To learn more about the fields and mapping of fields in the Information Security Risk Manager, please continue reading the tutorial here.

Latest videos and news

Subscribe to the SoftComply Blog

Stay connected with SoftComply and receive new blog posts in your inbox.

Ready to get started?

Contact us to book a demo and learn how SoftComply can cover all your needs