Framework & standard coverage — found from sitemap — eramba

Cited by

Facts read from this source

• ISO 27001 clause coverage Report an error

  “ISO 27001, clause by clause, in eramba Where each requirement lives, what you actually have to produce, and what the auditor will look at.”

• Unlimited users flat fee Report an error

  “Flat annual fee Unlimited users Every framework included Community edition free”

• Clause6 risk Report an error

  “6.1.2 - Risk module: likelihood, impact, score and treatment. 6.1.3 - Statement of Applicability from Compliance Analysis. Exclusions are Compliance Exceptions.”

• Clause9 1 feature Report an error

  “9.1 - Dynamic status over time: expired reviews and failed audits per requirement, before the auditor asks.”

• Modules count Report an error

  “Nine modules, one flat fee Every module is included in every edition. Nothing on this page is an add-on.”

• Module policies Report an error

  “Policies Write, review, approve and publish policies through a portal, with attestation via the Awareness Portal.”

• Module organisation Report an error

  “Organisation Issues, scope, roles and goals. The ISMS context, measurable at intervals.”

• Module risk Report an error

  “Risk Identify, classify, review and treat risks. Owners and review dates are mandatory.”

• Module internal controls Report an error

  “Internal Controls The activities you run, tested at regular intervals with collected evidence.”

• Module compliance analysis Report an error

  “Compliance Analysis Requirements linked to controls, policies, projects and risks. The SoA comes out of here.”

• Module exceptions Report an error

  “Exceptions Documented decisions that a requirement or risk is not treated, with owners and expiry.”

• Module projects Report an error

  “Projects What you will do in the future about a gap, with tasks and deadlines.”

• Module awareness Report an error

  “Awareness Videos, disclaimers and questionnaires that audiences complete on a schedule.”

• Module online assessments Report an error

  “Online Assessments Spreadsheet-defined questionnaires sent to anyone. Answers land in a portal for your review.”

• Community edition Report an error

  “Community Free Self-hosted. No user limit, no time limit.”

• Enterprise onprem Report an error

  “Enterprise on-premises from 2500€/year Runs on your infrastructure, with support and updates.”

• Enterprise saas Report an error

  “Enterprise SaaS from 5000€/year Hosted and operated by eramba, in the EU or the US.”

• Flat model Report an error

  “Flat annual price. Unlimited users, unlimited data, every module included. Your bill does not grow with your team.”

• Framework import CSV Report an error

  “Import the ISO 27001:2022 package All requirements as a CSV, ready to assign, track and report on. Annex A ships as the ISO 27002:2022 package.”

• Upload any framework CSV Report an error

  “The 70+ compliance packages are included and you can upload any framework as a CSV.”

• Auditor readonly account Report an error

  “Yes. Give auditors a read-only account scoped to what they need to see. There is a guide on the forum for exactly that setup.”

• Frameworks supported other Report an error

  “Guide and package ISO 27002, Annex A The 93 controls, and how the SoA is produced.”

• Compliance course Report an error

  “Work through the seven clauses above. The 22-minute Compliance Management course covers the mechanics.”

• Community downloads Report an error

  “39,591 downloads last year”

• Enterprise users count Report an error

  “641 enterprise users”

• Releases last year Report an error

  “11 releases last year”

• Usage history Report an error

  “Used for ISO, PCI and SOC 2 since 2015”

5 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO Pricing transparency
• The CISO Asset & risk management depth
• The CISO Controls, SoA & measures
• The CISO Framework & standard coverage
• The CISO Audit readiness & evidence
• The GRC Consultant Pricing transparency
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Controls, SoA & measures
• The GRC Consultant Framework & standard coverage
• The GRC Consultant Audit readiness & evidence
• The Evidence Integrator Pricing transparency
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Controls, SoA & measures
• The Evidence Integrator Framework & standard coverage
• The Evidence Integrator Audit readiness & evidence
• The Drafted IT Officer Pricing transparency
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Controls, SoA & measures
• The Drafted IT Officer Framework & standard coverage
• The Drafted IT Officer Audit readiness & evidence
• The Lead Auditor Pricing transparency
• The Lead Auditor Asset & risk management depth
• The Lead Auditor Controls, SoA & measures
• The Lead Auditor Framework & standard coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Skeptic Pricing transparency
• The Skeptic Asset & risk management depth
• The Skeptic Controls, SoA & measures
• The Skeptic Framework & standard coverage
• The Skeptic Audit readiness & evidence