Information Security Management with the QSEC-Suite - why?

What is the QSEC-SUITE?

The QSEC-Suite is a full solution to implement and operate the compliance and IT risk management in companies – systematically flexible, multi-client capability, multilingual, with comprehensive content.

‘Assisted by the mature templates the basic configuration for ‚our‘ ISMS in the QSEC Suite was captured and implemented in only a few workshops. During the definition of the business process levels and related IT risk management thereof the WMC company was a sparring partner on a par with us to pass the right solution for the implementation of ‘our’ ISMS in less than three intensive discussion meetings.’ stated Mr. Roger Schranz, Project Manager and Information Security Manager of the arvato systems company.

The QSEC-Suite is the solution for companies which know that the information security is mainly dependent from the security awareness of their users, administrators and responsible managers and far from technical systems. The compliance, risk and information security management are not topics with static conditions which, when reached, do never change but with a built-in continuous process.

You think that the establishment of ISMS in your company seems to be complex and expensive in terms of costs? You are then invited to trust the specialists of the WMC company and rely on the QSEC-Suite in your company.

With the QSEC-Suite

·     the companies are able to establish a systematic, integrated, structured, target-oriented and flexibly, analysable procedure for an compliance and IT risk management and to optimize their investments on the essential, business-critical processes.

·     the companies operate in accordance with international standards (e.g. ISO, BS, SOX) and establish a unified methodology and approach, indication and implementation of norms

·     the companies provide evidence of an internationally acknowledged approach for the information protection.

·     the responsible managers in companies sustainably survey, manage and document the up-to-date security status.

·     the companies professionally plan audits and certifications.

·     the companies increase the trust of customers, partners, suppliers and investors, shareholders and financial institutes.

·     the companies actively involve the staff members of all company divisions and levels in the ISMS.

„Information Security Management is always a key topic for the company management. The priority is to create a consistent risk awareness with regard to critical processes. For the Huf company the [Q]SEC-Suite developed by the WMC company is a tool to centrally and internationally monitor and control all relevant information and processes based on the Plan-Do-Check-Act cycle. This fact allows us to be a dependable partner for our clients.“

Thomas Grabowski, Managing Director, Huf Hülsbeck & Fürst GmbH

The QSEC-Suite includes:

·     compliance in accordance with the world-wide acknowledged standard – represented with the Plan-Do-Check-Act methodology

·     'best practice' IT risk management ISO/IEC 27005

·     measures, security incident and document management

·     review management and history management

·     enhancement with further international standards – ISO/IEC 9001, ISO/IEC 14001, ISO/IEC 20000 and many more.

·     worldwide and international presentable corporate structures

·     support, guidance and assistance with integrated methodology, measure proposals, sample documents etc. for a faster implementation – full content stored for each norm / law

·     capture and criticality assessment of the business processes for each inspected area centralized database with integration into the existing IT infrastructure (AD, SAP, asset system etc.) – no double capturing of data

·     assignment of dedicated tasks to those concerned in the project

·     up-to-date reporting of the security status

The QSEC-Moduls are:

·     Compliance Management

·     IT-Risk Management

·     Measures Management

·     Security Incident Management

·     BIA / BCM (only QSEC- GRC-Edition)

·     Reporting

·     Master Data

Technology

·     Web-Front-End for a browser-based, company-wide access to the software – client systems don’t need any software, InternetExplorer

·     .NET technology – can be used with both MS SQL-Server 2008 and MS Windows Server 2k8 – secure communication via SSL

Audit’s in Germany as well as in foreign countries, have been solved successful under use of QSEC by our references.

If you are interested in QSEC, don’t hesitate to ask for the data sheet. Of course it is also possible to show you QSEC by web conference or personally. We are pleased to hear from you!

Contact us by SoftGuide, by web-site: www.wmc-direkt.de or phone +49 40 650 336-0.