Integrated management system

Security and compliance,in a single management system.

CYBERTIX SGSI is the platform CYBERTIX uses to implement, operate and maintain each client's Information Security Management System. It covers everything from the initial assessment (GAP), context and risk analysis to audit and continual improvement, with the frameworks linked to each other, and delivers the OTS service (integrated security technical office) with its task plan, indicators and automations.

• ISO/IEC 27001
• ENS
• ENS-AD (Andorra)
• NIS2
• CRA
• IEC 62443
• TISAX
• SOC 2
• PCI DSS
• GDPR · LOPDGDD
• ISO/IEC 27701
• ISO/IEC 42001

• Governance · context, scope, interested parties, roles and policy
• Assets and risks · inventory, assessment, treatment, residual risk and annual comparison
• Continuity · business impact analysis (BIA), RTO and RPO
• Data protection · record of processing activities, DPIA, processors, data subject rights and breaches (GDPR and ISO/IEC 27701)
• Artificial intelligence · AI system inventory and impact assessment (ISO/IEC 42001)
• Controls · statement of applicability and mapping between frameworks
• Documentation · approval, versions, templates and change control
• Operation · evidence, mandatory tasks, records and incidents
• Evaluation and improvement · audits, nonconformities, objectives and management review
• OTS service · integrated security technical office: task plan per tier, client requests, committee, indicators, alerts and automation connectors
• People · company users, meeting minutes, questions and enquiries, and email notices
• Reports · in Word and Excel, ready for the auditor and management