General risk assessment

This module helps you meet the requirements of Articles 24 and 32 of the GDPR. This feature of the system is as automated as possible, and lets you create a list of all the processing activities (along with threats) through the supporting assets (resources) used. Having the data shown in a table will enable you to:

• Identify the resource owners and risk owners; determine the susceptibility of recources which may contribute to creating threats; indicate these resources’ safeguards which can prevent these threats
• Evaluate the likelihood that a threat can become real and the data can lose a specific security attribute (confidentiality, integrity, availability, lawfulness)
• Assess the value of risk based on an evaluation of the likelihood and severity of impact for data subjects for each processing activity in a separate dashboard
• Develop a detailed risk management plan for specific threats, assets or activities, including assigning one plan to many combinations
• Predict the impact of the risk management plan on the value of the risk from the initial evaluation
• Check whether it is necessary to carry out a data impact assessment based on the risk assessment results. Thanks to the group editing feature, each of the above operations can be carried out simultaneously for up to several hundred records

Register of the categories of processing

This feature lets you create a fully compliant record of the categories of processing activities in which the organization shows a list of activities performed for other entities. The module allows you to define categories and copy them for many controllers (if the same range of services is offered to many organizations).

Repository of documents /
Repository of DAPR documents

These features enable you to:

• Store and keep a record of policies, procedures, templates and any other company documents related to personal data protection
• Use document templates prepared by DAPR

Record of incidents and breaches

This feature allows you to:

• Evaluate an event and qualify it as a security incident or a personal data breach
• Assess the risk following a personal data breach and identify a recommended procedure for notifying the supervisory authority, the controller and the data subjects
• Assess the risk of a breach using two methods: ENISA and DAPR
• Automatically prepare a notification for the supervisory authority, a message for the data controller and the data subjects using the DAPR assessment form
• Keep a record of security incidents and personal data breaches
• Store documentation related to an incident/breach

Record of data subjects exercising their rights

This feature enables you to:

• Keep a record of and categorize requests of data subjects
• Keep an eye on timely completion of requests: once a new request is added, a relevant deadline is applied
• Make a comparison of individual requests
• Store documents related to requests, such as scans, responses and other items

Record of making personal data available

This feature allows you to:

• Keep a record of all the occasions when personal data have been made available by the organization
• Categorize recipient types and to keep a record of the types and sizes of files which have been made available
• Store documents which specify the grounds for making the files available, such as requests and agreements

DPO Journal

This feature enables you to:

• Keep a detailed record of DPO’s operations to ensure accountability
• Store documents which confirm that activities have been performed
• Plan DPO’s activity
• Collect information on training courses, audits and recommendations, which can be stored as part of the documentation

Reports

This feature allows you to:

• Export aggregate lists of data from all the key app functionalities as xlsx files for archiving or audit purposes
• Prepare clear and transparent reports which give you insight into processes, resources and threats that pose the biggest risk to data security across an organization. The reports are helpful in drawing up effective procedures
• Compile reports which support an analytical approach to the processess occurring across the organization. The reports will enable you to find and evaluate threats and to make appropriate changes in management operations
• Generate reports in a clear and readable format, ready to be printed or presented to your organization’s executive team as a so-called heat map
• Get extended reports including analytical threat maps which enable further (drill-down) detailed analysis
• Generate a report on risk distribution across the organization with a breakdown of organizational units
• Get a quick overview of the risks according to any criteria thanks to movable tables (for example, you can check which processing activities would be affected by the company server malfunction)