Managing investigations successfully

Effective management of Governance, Risk and Compliance (GRC) requires an organisation to undertake a range of investigations.

Blackthorn GRC Incident Manager enables you to collate all information associated with these investigations, logging actions taken and tracking follow-up activity. As a result, you will gain in-depth intelligence about incidents, as well as managing impact and achieving resolution effectively and collaboratively.

End-to-end process support

From initial notification that an incident has taken place, through all the key stages of follow-up activity, Blackthorn GRC Incident Manager offers end-to-end workflow support for the entire investigation management process.

Providing a secure, centralised repository for all information concerning sensitive incidents, Blackthorn GRC helps you to preserve vital evidence and enables incident management teams to collaborate effectively.

Automatic updates to operational risk models

Data collected within Blackthorn GRC Incident Manager is automatically fed into asset-based risk models within the Blackthorn GRC Risk Manager module. This ensures that your risk models are kept up-to-date and accurately reflect the operational risk experienced by your organisation.

Secure data log

Every investigation incorporates a secure data log which safeguards the integrity of all information entered in such a way that it is not possible to change entries made. As well as helping to protect vital information, the secure data log also ensures that information can later be called on as legally-admissible evidence.

Sophisticated analysis tools

Situational awareness tools and incident cost calculations help you to understand the full impact of incidents on your organisation.

Real-time reporting

Dashboards incorporating a range of charts and advanced reporting features enable in-depth analysis and support management decision-making.

Wide range of applications

Blackthorn GRC Incident Manager supports effective investigations management in a wide range of areas, including:

• Physical security incidents
  Including theft and vandalism
• IT and information security breaches
  Including contact with malicious software, unauthorised access and inappropriate usage. With CERT support for NIST/ISO standards
• Health and safety issues
  Including fire and evacuation & OHSAS 18001
• Regulatory or legal compliance breaches
  Including those associated with privacy and data protection, Information Governance (IG), anti-bribery, anti-money laundering and fraud. With support for Sarbanes-Oxley and HIPPA
• Staff-related issues
  Including incidents such as harassment and disciplinary matters
• Crises and emergencies
  Requiring execution of business continuity plans with support for BS 25999
• Breakdowns in quality control
  Including support for ISO 9001
• Child and adult social care and protection
  Following UK NHS standards and support for the London Child Protection Procedures