Stackfield

Multiple parallel compliance frameworks, one diverse GRC domain

Stackfield is characterized by a strong focus on security and data protection made in Germany and is therefore particularly suitable for companies and teams with high information security requirements.

Since information security and data protection “made in Germany” are important pillars of the product philosophy, an effective ISMS is an important component of the overall corporate strategy.

The challenge was to document and operationalize several compliance standards and different compliance areas (ISMS & DPM) simultaneously.

Due to the multitude of compliance standards, the operational challenge lay in managing the various internal and external audits as well as deriving and monitoring concrete measures in accordance with the compliance standard.

Strong compliance modeling, transparent precision

Athereon GRC's advanced mapping functionality enables Stackfield to implement and operationalize multiple, interconnected standards in parallel with minimal additional effort, including through shared evidence management.

The granular modeling of standard requirements in Athereon GRC supports Stackfield in the step-by-step implementation and documentation of requirements and, thanks to automation functions, shows the exact current compliance progress for each individual standard.

The deep integration of data protection management and information security management, including the joint functions of audit management, action management and risk management, enables efficient implementation and long-term cost-effective operation of the management system.

Successful external (re-)certification of various frameworks

By implementing Athereon GRC, the ISMS was gradually expanded to include additional compliance frameworks. Thanks to fully integrated standards, this was achieved with minimal documentation effort.

Successful (re-)certifications according to ISO 27001, ISO 27017 and BSI C5:2020 confirm the achievement.

Stackfield maintains a 360-degree view of the compliance and risk situation at all times to ensure and continuously develop a solid ISMS in day-to-day business operations.