Stackfield

Multiple parallel compliance frameworks, a diverse GRC domain

Stackfield has a strong focus on security and data protection made in Germany and is therefore particularly suitable for companies and teams with high information security requirements.

Since information security and data protection “made in Germany” are important pillars of the product philosophy, an effective ISMS is an important part of the overall corporate strategy.

The challenge was to document and operationalize several compliance standards and various compliance areas (ISMS & DSM) in parallel.

Due to the large number of compliance standards, the operational challenge was to manage the various internal and external audits and to derive and monitor specific measures in accordance with the compliance standard.

Clear compliance modeling, transparent precision

Athereon GRC enables Stackfield to implement and operationalize multiple interlinked standards in parallel with little additional effort, including through joint evidence management.

The granular modelling of standard requirements in Athereon GRC supports Stackfield in the step-by-step implementation and documentation of the requirements and — thanks in part to automation functions — shows exactly the current compliance progress for each individual standard.

The deep integration of data protection management and information security management, including the joint audit management, action management and risk management functions, enables efficient implementation and cost-effective operation of the management system in the long term.

Existing external (re) certification of various frameworks

By using Athereon GRC, the ISMS was gradually expanded to include additional compliance frameworks. Thanks to fully integrated standards, this could be achieved with minimal documentation effort.

Successful (re) certifications in accordance with ISO 27001, ISO 27017 and BSI C 5:2020 confirm the success.

Stackfield always has a 360-degree view of the compliance and risk situation in order to ensure and continuously develop a waterproof ISMS in everyday business life.