EspañolPortuguês

IT Governance, Risk and Compliance Management

Solutions > Risk Assessment

Risk Assessment

Modulo Risk Manager helps organizations streamline and automate processes required for in-depth IT risk assessments and compliance projects by collecting and centralizing data related to both technology assets (i.e. software and equipment) and non-technology assets (i.e. people, processes and facilities) in an organization to assess risk and ensure compliance.

Modulo Risk Manager calculates risk scores easily, as it holds knowledge of IT assets, best practices for the various standards and workable default risk component values for every targeted asset and control. This same knowledge base simplifies individual interview processes with prepared questionnaires.

Time is saved by encapsulating these interviews with a viewer that can be emailed to individuals being surveyed, or answered via Web. After completion, answers are mapped to best practice controls for any standard and automatically saved in the secure repository.

The software also produces multiple compliance reports using stored data, therefore reducing “audit silos”. It is user friendly and can run on a laptop or server, being agent-free.

Modulo Risk Manager includes a large library of controls and policies grouped into specific policy knowledge bases that can hold more than 11,000 policies and controls organized into 195 policy knowledge bases having over 4,000 automated evidence collectors.

These knowledge bases are kept up-to-date by our own Research Lab, using renowned sources such as NIST, DISA, NSA, CIS, and specific vendors. Additionally, the system allows clients to create their own policy knowledge bases.

How can Modulo Risk Manager™ help your business?

  • Reducing the effort required for risk assessment by 40-50%;
  • Creating a Security Scorecard including metrics and indexes;
  • Providing a centralized repository for all organization's assets (software, hardware, environment, people and process);
  • Collecting and centralizing data relating to technology assets, (software and equipment) and non-technology assets (people, processes and environment);
  • Ensuring that the company remains up-to-date with latest market practices, with constant updates of the knowledge bases;
  • Generating risk indicators for Corporate Governance;
  • Providing detailed recommendations to support control implementation.
  • Providing a Geo-referenced Risks overview
  • Providing risk assessment that allows measuring your organization's current level of compliance for SOX, PCI, ISO 27001, HIPAA, COBIT, FISAP, FISMA, NIST 800-53a, BS 2599, A 130 and DOD 8500.2;
  • Tracking risks evolution;
  • Generating executive reports that enable you to monitor the evolution of control implementation
Modulo © Copyright - All rights reserved.