Our platform

AdvimapGRC

The method we use with clients, built into software. Assets, processes, data, risks and access rights live in one connected model — so compliance work done once stays done.

Built for organisations that answer to regulators

Connected by design

An asset links to its processes, data, risks and access rights. Change it once and the effect shows everywhere.

Multi-company

Run a group of companies in one place and compare them side by side.

Multi-user

Owners, contributors and auditors work on the same records.

Module-level permissions

Each user sees only the modules and companies they are authorised for.

Nine connected modules

Each module works on its own, and each one draws on the others: a process links to the assets and data it uses, a risk to the assets it threatens, a DPIA finding to the activity that closes it.

  1. 01

    Asset inventory

    Hardware, software and information assets, each with a named owner.

  2. 02

    Process inventory

    Business processes and the assets and data they depend on.

  3. 03

    Data inventory

    Records of personal data processing, structured for the GDPR.

  4. 04

    Risk register

    Risks scored before and after treatment, against a target level.

  5. 05

    Access & authorisation matrix

    Who can reach which systems and data, in one reviewable view.

  6. 06

    Business impact analysis

    Disruption scenarios scored to set recovery priorities.

  7. 07

    Data protection impact assessment

    DPIAs whose findings turn directly into actions.

  8. 08

    Activities

    Tasks and deadlines from every module, tracked in one place.

  9. 09

    Assessments

    Maturity assessments scored across perspectives, such as IT and cybersecurity.

Software and advisory, one method

AdvimapGRC follows the same method as our assessments and compliance programmes. You can run it with your own team, or have our fractional CIO, CISO and DPO services run it with you — the records stay yours either way.

See our services

Contact

See AdvimapGRC on your own case.
We’ll walk you through it.

A short note about your organisation and what you need is enough. We reply within one business day.