Consulting firm seeks ISMS (Information Security Management)

As a consulting firm, we offer information security management as a service and would like to support and advise our customers in setting up ISM systems. The ISMS should be set up in accordance with specific German guidelines. Software for organizing DSM systems is already in use for our customers. In order to also be able to offer ISMS support, additional software is to be added. A cloud solution is preferred.

The software must meet the following requirements:

Must-have:

• Mapping of the organization
• Mapping of business processes
• Mapping of assets
• Risk analysis
• Security incidents
• Risk treatment plan
• Data categories

Optional:

• Rights and role management
• Checklists
• Audit management
• Technical and organizational measures (TOM)
• Business impact analysis
• Document storage
• Decentralized data collection
• Grouping of assets
• Automatic risk assessment
• Unstructured data
• Mapping of system landscapes
• Digitized business processes

Our customers are companies with approximately 100-1000 employees each.