Comprehensive compliance management

Achieving a position of control in a world of increasing regulatory and legal compliance can be a tough job that is further complicated by an organisation’s need to maintain effective policies and procedures, and disseminate information through awareness programmes.

Blackthorn GRC Compliance Manager is a single point of reference in the management of all compliance activities. It enables your organisation to achieve GRC objectives in a cost-effective manner, through connected, team-based management of operational risk.

Single repository for compliance data

Blackthorn GRC Compliance Manager is a centralised solution that supports the wide range of proactive activities needed to meet compliance objectives across your entire organisation. By providing a single repository for information gathering, workflows and reporting, the solution eliminates the need for numerous different software and paper-based recording systems – improving efficiency and reducing costs.

Connect your compliance organisation

You can use Blackthorn GRC Compliance Manager to connect many areas of your organisation to undertake different compliance-oriented activities. Teams can begin to build information into common risk models, providing a clear and comprehensive view of the operational risk faced by your organisation.

Easy progress tracking of assigned tasks

Easy-to-use functionality enables managers to assign responsibility for carrying out key tasks, and then track progress. This improves overall visibility and control of compliance activities.

Support for collaborative working

As well as helping internal staff work together more effectively, the online access and strict role-based access control structure provided by Blackthorn GRC Compliance Manager enable the strict enforcement of segregation-of-duties rules for internal personnel. In addition, these high-security features support close collaboration with external business partners and suppliers – without compromising security.

Clear management information

Dashboards and other advanced reporting features within Blackthorn GRC Compliance Manager provide high-quality, real-time management information to support decision-making.

Comprehensive assessment support

Typical compliance activities supported by Blackthorn GRC Compliance Manager include:

• IT and information security assessments
• Policy exception management
• Sarbanes-Oxley reviews
• IT and InfoSec audits
• PCI DSS reviews
• SAS 70/SSAE 16 assessments
• ISO/EIC 27001 audits
• Health and safety audits
• Physical security reviews
• Legal compliance planning and reviews
• Vulnerability analyses and penetration testing
• Awareness training