Core modules for structured management of compliance, accountability, and the organization’s day-to-day work.
Regulations and standards
Active standard implementations in organizations and their linkage to controls. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Requirements and controls
Workspace for controls, owners, status, due dates, comments and related evidence. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Evidence management
Central view of evidence files linked to controls and other activities. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Sources and changes
Applicable laws, standards, and contracts. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Obligations register
Register of legal, regulatory, contractual, internal and other obligations, deadlines, owners and completion status. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Regulatory communications
Register of official regulator communications and related correspondence. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Audits and auditor workspace
Workspace for auditors, audit engagements, notes, findings and reports. This gives the organization clear traceability from requirements to implementation and evidence, making compliance easier to demonstrate.
Tasks
Work tasks, deadlines, owners, statuses, comments and execution tracking. This clarifies accountability, improves execution tracking, and gives management a reliable view of progress.
Security metrics
KPI, KRI, and KCI indicators. This clarifies accountability, improves execution tracking, and gives management a reliable view of progress.
Threat intelligence
Sources, threats, vulnerabilities and related measures. This helps the organization identify exposure earlier, direct resources to priorities, and make well-founded risk decisions.
Incidents
Register and handling of security, operational and other relevant incidents. This clarifies accountability, improves execution tracking, and gives management a reliable view of progress.
Employees
Employee register, linked user accounts and basic employee information. This clarifies accountability, improves execution tracking, and gives management a reliable view of progress.
Employee competencies and training
Competency, training, education and related evidence records. This clarifies accountability, improves execution tracking, and gives management a reliable view of progress.
Risk register
Risk register, inherent and residual risk assessment, treatment and risk acceptance. This helps the organization identify exposure earlier, direct resources to priorities, and make well-founded risk decisions.
BIA, business impact analysis
Business impact analysis, critical processes, dependencies and recovery requirements. This helps the organization identify exposure earlier, direct resources to priorities, and make well-founded risk decisions.
Nonconformity management
Nonconformity register, corrective actions, statuses and closure. This helps the organization identify exposure earlier, direct resources to priorities, and make well-founded risk decisions.
Resources
Business, information and technology resource inventory and relationships. This helps the organization identify exposure earlier, direct resources to priorities, and make well-founded risk decisions.
Supplier register
Supplier register, core data, contacts, status and related risks. This helps resolve user needs faster, retain organizational knowledge, and deliver consistent expert support.
Supplier exit strategies
ICT supplier exit, transition, test and replacement plans. This helps resolve user needs faster, retain organizational knowledge, and deliver consistent expert support.
GDPR and privacy
GDPR modules for processing records, data subject rights, breaches, processors, transfers and retention. This supports consistent protection of personal data, timely handling of obligations, and demonstrable privacy compliance.
Processing activities, ROPA
ROPA and personal data processing activity records. This supports consistent protection of personal data, timely handling of obligations, and demonstrable privacy compliance.
Data subject requests
Data subject request register, deadlines, statuses and rights handling. This supports consistent protection of personal data, timely handling of obligations, and demonstrable privacy compliance.
DPIA, LIA and privacy assessments
Unified workspace for DPIA screenings, DPIA assessments and LIA assessments. This supports consistent protection of personal data, timely handling of obligations, and demonstrable privacy compliance.
BCM BIA
Connected BIA records, assessments, recovery requirements, and readiness indicators. This strengthens resilience, exercises the response to disruption, and shortens the recovery of critical processes.
Platform customer support
Customer support for questions about using the XCompliance platform. This helps resolve user needs faster, retain organizational knowledge, and deliver consistent expert support.
