CRISAM^® GRC | Data Protection Management System

CRISAM® Data Protection Management System - so that your company is EU GDPR compliant

The EU General Data Protection Regulation (GDPR) includes numerous requirements that affect companies regardless of industry and company size. With 99 articles and 173 recitals, the EU GDPR aligns data protection with the handling of critical infrastructures (EU NIS Directive) and information security management (ISMS).

A holistic data protection management system (DSMS) is required for your company to be EU GDPR-compliant. With its unique, easy-to-use and intuitive interface, the CRISAM® data protection management system allows you to easily map the structure of your processing activities, including the categories of data subjects and data categories. CRISAM® supports you in recording your data protection content in compliance with the law.

Benefits and key functionalities:

• Holistic modeling and evaluation of EU GDPR requirements
• Simple and flexible mapping of group structures
• Recording of data subjects, processing activities, data categories and data transfer
• Application of the error tree analysis in accordance with DIN 25424
• Content libraries
• Dashboard for visualizing data protection processes
• Control through automated workflows
• Complete integration into ISMS process and modeling through included CRISAM® ISMS, Data Privacy and EU GDPR Knowledge Pack
• Integrated country-specific blacklist and whitelist regulations
• Processing of requests from data subjects
• Generation of the procedure directory with a click
• Includes all necessary functionalities for generating the data protection impact assessment report
• Compliance analysis report to prove the conformity of your DMS with the requirements of the EU GDPR
• The integrated mapping enables immediate evaluation from CRISAM® controls, no further evaluation is required
• Traceable and audit-proof
• Available in German and English

Integration of the two management processes ISMS and DSMS

CRISAM® provides all the essential features to enable you to operate the data protection management process in close integration with the information security management system (ISMS). Analogous methods that are already used in the ISMS process are integrated for the automation of the DSMS.

The Privacy Impact Assessment is mapped in the same way as the Business Impact Analysis. The risk assessment for a data protection breach is based on the analysis of the IT assets from the CRISAM® risk tree and the assessment from the information objects on the one hand and the assessment of the process on the other. The security analyses required in Art. 32 Para. 1 of the EU GDPR are ensured by integrating the ISMS analyses.

Reporting

CRISAM® Reporting supports the data protection officer or the person responsible in their duty to provide information and documentation. The software supports largely automatic generation:

• the data protection impact assessment
• the procedure directory (public procedure directory, internal procedure directory)
• a compliance report for the EU GDPR.

Proof of the company's compliance with the EU GDPR is provided and evaluated with the help of the CRISAM® compliance report.