Our platform
AdvimapGRC
The method we use with clients, built into software. Assets, processes, data, risks and access rights live in one connected model — so compliance work done once stays done.
Built for organisations that answer to regulators
Connected by design
An asset links to its processes, data, risks and access rights. Change it once and the effect shows everywhere.
Multi-company
Run a group of companies in one place and compare them side by side.
Multi-user
Owners, contributors and auditors work on the same records.
Module-level permissions
Each user sees only the modules and companies they are authorised for.
Data quality
Built-in rules point out missing and conflicting information across your records. Close the gaps in bulk, with every change previewed before it is applied.
Nine connected modules
Each module works on its own, and each one draws on the others: a process links to the assets and data it uses, a risk to the assets it threatens, a DPIA finding to the activity that closes it.
- 01
Asset inventory
Hardware, software and information assets, each with a named owner.
- 02
Process inventory
Business processes and the assets and data they depend on.
- 03
Data inventory
Records of personal data processing, structured for the GDPR.
- 04
Risk register
Risks scored before and after treatment, against a target level.
- 05
Access & authorisation matrix
Who can reach which systems and data, in one reviewable view.
- 06
Business impact analysis
Disruption scenarios scored to set recovery priorities.
- 07
Data protection impact assessment
DPIAs whose findings turn directly into actions.
- 08
Activities
Tasks and deadlines from every module, tracked in one place.
- 09
Assessments
Readiness, maturity and compliance assessments from a template library, applied to a data set, a service, a website or the whole organisation.
Assessment templates
The Assessments module works from a template library. Choose a template, name what it covers — a data set, a service, a website or the whole organisation — and each result comes with prioritised action recommendations and an executive report.
Readiness
How well defences hold against a specific threat.
Data Breach Readiness Assessment
Ransomware Readiness Assessment
Maturity
How firmly a capability is established.
IT Infrastructure Health Check
Data Backup Maturity Assessment
Business Continuity Maturity Assessment
Compliance
How fully the requirements of a regulation are met.
NIS2 Compliance Assessment
Website Cookie Compliance Assessment (GDPR and ePrivacy)
Software and advisory, one method
AdvimapGRC follows the same method as our assessments and compliance programmes. You can run it with your own team, or have our fractional CIO, CISO and DPO services run it with you — the records stay yours either way.
See our servicesContact
See AdvimapGRC on your own case.
We’ll walk you through it.
A short note about your organisation and what you need is enough. We reply within one business day.