Requirement

Data system management

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Fulfill this requirement by completing the tasks below ->
Data system management
This requirement is part of the framework:  

Other requirements of the framework

No items found.
0
Data system management
No items found.
System management
Best practices
How to implement:
Data system management
This policy on
Data system management
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.
Read below what concrete actions you can take to improve this ->
System management
Data system management
Frameworks that include requirements for this topic:
Cybersecurity Law of the People's Republic of China
NEN 7510 - Informatiebeveiliging in de zorg (Nederlands)
Ustawa o krajowym systemie cyberbezpieczeństwa (Polska)
Lov om digital sikkerhet (Norge)
Sikkerhetsloven (Norge)
Säkerhetsskyddslagen (Sverige)

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
Data system management
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
Data system listing and owner assignment
Critical
High
Normal
Low
80
requirements
System management
Data system management

Data system listing and owner assignment

This task helps you comply with the following requirements

5. Principles relating to processing of personal dataGDPR
24. Responsibility of the controllerGDPR
28. Data processorGDPR
32. Security of processingGDPR
44. General principle for transfersGDPR
8.1.1: Inventory of assetsISO 27001
8.1.2: Ownership of assetsISO 27001
8.1.3: Acceptable use of assetsISO 27001
13 §: Tietoaineistojen ja tietojärjestelmien tietoturvallisuusTiHL
I06: Pääsyoikeuksien hallinnointiKatakri
Approval process before deploying new software
Critical
High
Normal
Low
3
requirements
System management
Data system management

Approval process before deploying new software

This task helps you comply with the following requirements

1.3.4: Use of approved softwareTISAX
ID.RA-09: Reviewing hardware and softwareNIST 2.0
Article 37: ICT systems acquisition, development, and maintenanceDORA simplified RMF
Personnel guidelines for safe data system and authentication info usage
Critical
High
Normal
Low
52
requirements
System management
Data system management

Personnel guidelines for safe data system and authentication info usage

This task helps you comply with the following requirements

29. Processing under the authority of the controller or processorGDPR
32. Security of processingGDPR
8.1.3: Acceptable use of assetsISO 27001
9.1.1: Access control policyISO 27001
9.3.1: Use of secret authentication informationISO 27001
12.1.1: Documented operating proceduresISO 27001
6.5: Tietojärjestelmien asennus, ylläpito ja päivitysOmavalvontasuunnitelma
PR.AC-7: User, device, and other asset authenticationNIST
SEC-07: Password policyCyber Essentials
HAL-19: Tietojen käsittely Julkri
General principles regarding the use of cloud services
Critical
High
Normal
Low
2
requirements
System management
Data system management

General principles regarding the use of cloud services

This task helps you comply with the following requirements

5.23: Information security for use of cloud servicesISO 27001
5.23: Informatiebeveiliging voor het gebruik van clouddienstenNEN 7510
Manufacturers inform about the cessation of operations
Critical
High
Normal
Low
1
requirements
System management
Data system management

Manufacturers inform about the cessation of operations

This task helps you comply with the following requirements

Article 13.23: Ceasing operationsCRA
Declaration of conformity
Critical
High
Normal
Low
1
requirements
System management
Data system management

Declaration of conformity

This task helps you comply with the following requirements

Article 13.20: Declaration of conformityCRA
Displaying the end date of the support period
Critical
High
Normal
Low
1
requirements
System management
Data system management

Displaying the end date of the support period

This task helps you comply with the following requirements

Article 13.19: Support periodCRA
Documentation retention in connection with software maintenance
Critical
High
Normal
Low
1
requirements
System management
Data system management

Documentation retention in connection with software maintenance

This task helps you comply with the following requirements

Article 13.13: Digital product documentation retentionCRA
Documentation of security related information
Critical
High
Normal
Low
1
requirements
System management
Data system management

Documentation of security related information

This task helps you comply with the following requirements

Article 13.1(.2.l): Providing security‐related informationCRA
Mechanisms to prevent or minimize negative impacts on other systems
Critical
High
Normal
Low
2
requirements
System management
Data system management

Mechanisms to prevent or minimize negative impacts on other systems

This task helps you comply with the following requirements

Article 13.1(.2.i): Minimizing the negative impactCRA
Supporting the product throughout the support period
Critical
High
Normal
Low
1
requirements
System management
Data system management

Supporting the product throughout the support period

This task helps you comply with the following requirements

Article 13.8: SupportCRA
Ensuring the accessibility of the support period and the notification of its end
Critical
High
Normal
Low
1
requirements
System management
Data system management

Ensuring the accessibility of the support period and the notification of its end

This task helps you comply with the following requirements

Article 13.19: Support periodCRA
Contact information for reporting vulnerabilities
Critical
High
Normal
Low
2
requirements
System management
Data system management

Contact information for reporting vulnerabilities

This task helps you comply with the following requirements

Vuln.6: Sharing information about potential vulnerabilitiesCRA
Support period determined for products
Critical
High
Normal
Low
1
requirements
System management
Data system management

Support period determined for products

This task helps you comply with the following requirements

Article 13.8: SupportCRA
Information and instructions for user
Critical
High
Normal
Low
1
requirements
System management
Data system management

Information and instructions for user

This task helps you comply with the following requirements

Article 13.18: Information and instructionsCRA
Documentation of changes and their impact on digital elements
Critical
High
Normal
Low
1
requirements
System management
Data system management

Documentation of changes and their impact on digital elements

This task helps you comply with the following requirements

Article 13.14: ConformityCRA
Integrity protection of data systems
Critical
High
Normal
Low
2
requirements
System management
Data system management

Integrity protection of data systems

This task helps you comply with the following requirements

Article 13.1(.2.f): IntegrityCRA
Documentation of the change management procedure
Critical
High
Normal
Low
1
requirements
System management
Data system management

Documentation of the change management procedure

This task helps you comply with the following requirements

No items found.
System error handling procedures
Critical
High
Normal
Low
1
requirements
System management
Data system management

System error handling procedures

This task helps you comply with the following requirements

No items found.
Risk assesment of legacy systems
Critical
High
Normal
Low
1
requirements
System management
Data system management

Risk assesment of legacy systems

This task helps you comply with the following requirements

No items found.
How the system assets are used
Critical
High
Normal
Low
1
requirements
System management
Data system management

How the system assets are used

This task helps you comply with the following requirements

No items found.
Capacity and performance managemenet
Critical
High
Normal
Low
1
requirements
System management
Data system management

Capacity and performance managemenet

This task helps you comply with the following requirements

No items found.
Performance management of used systems
Critical
High
Normal
Low
1
requirements
System management
Data system management

Performance management of used systems

This task helps you comply with the following requirements

No items found.
Policy for workstation use
Critical
High
Normal
Low
2
requirements
System management
Data system management

Policy for workstation use

This task helps you comply with the following requirements

No items found.
Establish comprehensive inventory of critical infrastructure points
Critical
High
Normal
Low
1
requirements
System management
Data system management

Establish comprehensive inventory of critical infrastructure points

This task helps you comply with the following requirements

Art. 13.3.1: Inventaire et localisation des points critiquesLoi infrastructures critiques
Accreditation of information systems
Critical
High
Normal
Low
2
requirements
System management
Data system management

Accreditation of information systems

This task helps you comply with the following requirements

§ 6-3: Godkjenning av skjermingsverdige informasjonssystemerSikkerhetsloven
Article 23: Critical network and specialized cybersecurity product security certificationCSL (China)
Delegated security monitoring for shared systems
Critical
High
Normal
Low
1
requirements
System management
Data system management

Delegated security monitoring for shared systems

This task helps you comply with the following requirements

§ 6-4.5: Delegert sikkerhetsovervåkingSikkerhetsloven
Regular testing and documentation of security controls
Critical
High
Normal
Low
2
requirements
System management
Data system management

Regular testing and documentation of security controls

This task helps you comply with the following requirements

§ 6-2: Beskyttelse av skjermingsverdige informasjonssystemerSikkerhetsloven
§ 10: Krav om sikkerhet for tilbydere av digitale tjenesterNIS2 NO
System capacity planning and resilience
Critical
High
Normal
Low
1
requirements
System management
Data system management

System capacity planning and resilience

This task helps you comply with the following requirements

§ 10.e: Systemrobusthet og tilgjengelighetNIS2 NO
Establishing and maintaining a service provider management policy
Critical
High
Normal
Low
2
requirements
System management
Data system management

Establishing and maintaining a service provider management policy

This task helps you comply with the following requirements

15.2: Establish and Maintain a Service Provider Management PolicyCIS 18
Establishing and maintaining dedicated computing resources for all administrative work
Critical
High
Normal
Low
1
requirements
System management
Data system management

Establishing and maintaining dedicated computing resources for all administrative work

This task helps you comply with the following requirements

12.8: Establish and Maintain Dedicated Computing Resources for All Administrative WorkCIS 18
Establishing and maintaining remediation process
Critical
High
Normal
Low
2
requirements
System management
Data system management

Establishing and maintaining remediation process

This task helps you comply with the following requirements

7.2: Establish and Maintain a Remediation ProcessCIS 18
Article 22.1: Compliance with national cybersecurity standardsCSL (China)
Centralizing account management
Critical
High
Normal
Low
1
requirements
System management
Data system management

Centralizing account management

This task helps you comply with the following requirements

5.6: Centralize Account ManagementCIS 18
Deleting or disabling any dormant accounts
Critical
High
Normal
Low
1
requirements
System management
Data system management

Deleting or disabling any dormant accounts

This task helps you comply with the following requirements

5.3: Disable Dormant AccountsCIS 18
Host-based data loss prevention tool
Critical
High
Normal
Low
1
requirements
System management
Data system management

Host-based data loss prevention tool

This task helps you comply with the following requirements

3.13: Deploy a Data Loss Prevention SolutionCIS 18
Segment data processing and storaging based on the sensitivity of the data
Critical
High
Normal
Low
1
requirements
System management
Data system management

Segment data processing and storaging based on the sensitivity of the data

This task helps you comply with the following requirements

3.12: Segment Data Processing and Storage Based on SensitivityCIS 18
Asset management strategy
Critical
High
Normal
Low
1
requirements
System management
Data system management

Asset management strategy

This task helps you comply with the following requirements

1.1: Establish and Maintain Detailed Enterprise Asset InventoryCIS 18
Ensuring authorized software is supported
Critical
High
Normal
Low
1
requirements
System management
Data system management

Ensuring authorized software is supported

This task helps you comply with the following requirements

2.2: Ensure Authorized Software is Currently SupportedCIS 18
Protection of data in use
Critical
High
Normal
Low
3
requirements
System management
Data system management

Protection of data in use

This task helps you comply with the following requirements

PR.DS-10: Data-in-use is protectedNIST 2.0
15.2.η: ΚρυπτογράφησηNIS2 Greece
§ 2.2.2 (Skydd): InformationssäkerhetsskyddsåtgärderSSL
Ensure the integrity of downloaded software products
Critical
High
Normal
Low
1
requirements
System management
Data system management

Ensure the integrity of downloaded software products

This task helps you comply with the following requirements

2.1.4: Reduce the risk of targeted manipulation of ICT products in the supply chainNSM ICT-SP
Regulating and monitoring physical provider access when performing maintenance on ICT products
Critical
High
Normal
Low
2
requirements
System management
Data system management

Regulating and monitoring physical provider access when performing maintenance on ICT products

This task helps you comply with the following requirements

2.1.4: Reduce the risk of targeted manipulation of ICT products in the supply chainNSM ICT-SP
Article 32: Physical and environmental securityDORA simplified RMF
Map the flow of information between work processes, users, devices and services
Critical
High
Normal
Low
3
requirements
System management
Data system management

Map the flow of information between work processes, users, devices and services

This task helps you comply with the following requirements

1.1.6: Identify information processing and data flowNSM ICT-SP
3.8: Document Data FlowsCIS 18
5.9: Inventarisatie van informatie en andere gerelateerde activaNEN 7510
Design the ICT system using ICT products which integrate well
Critical
High
Normal
Low
2
requirements
System management
Data system management

Design the ICT system using ICT products which integrate well

This task helps you comply with the following requirements

2.2.1: Establish and maintain a comprehensive security architectureNSM ICT-SP
2.2.2: Design the ICT system using ICT products which integrate wellNSM ICT-SP
Ensure that the necessary security functions are implemented in an ICT system
Critical
High
Normal
Low
2
requirements
System management
Data system management

Ensure that the necessary security functions are implemented in an ICT system

This task helps you comply with the following requirements

2.2.1: Establish and maintain a comprehensive security architectureNSM ICT-SP
§ 10: Krav om sikkerhet for tilbydere av digitale tjenesterNIS2 NO
Verifying the security of external system connections
Critical
High
Normal
Low
2
requirements
System management
Data system management

Verifying the security of external system connections

This task helps you comply with the following requirements

PR.AC-3: Remote access is managed.CyberFundamentals
GV.SC-05: Cybersecurity risk requirements in contracts with suppliers and third partiesNIST 2.0
Defining IT system auditing requirements
Critical
High
Normal
Low
3
requirements
System management
Data system management

Defining IT system auditing requirements

This task helps you comply with the following requirements

5.2.6: IT System ManagementTISAX
§ 10: Krav om sikkerhet for tilbydere av digitale tjenesterNIS2 NO
Management process for approved software
Critical
High
Normal
Low
7
requirements
System management
Data system management

Management process for approved software

This task helps you comply with the following requirements

1.3.4: Use of approved softwareTISAX
PR.PS-02: Software managementNIST 2.0
PR.PS-06: Secure software development practicesNIST 2.0
2.1: Establish and Maintain a Software InventoryCIS 18
2.2: Ensure Authorized Software is Currently SupportedCIS 18
8.1.5: Zapobiegać i ograniczać skutki incydentówNIS2 Poland
Documentation of interfaces for data systems
Critical
High
Normal
Low
41
requirements
System management
Data system management

Documentation of interfaces for data systems

This task helps you comply with the following requirements

8.1.1: Inventory of assetsISO 27001
22 §: Tietojen luovuttaminen teknisen rajapinnan avulla viranomaisten välilläTiHL
23 §: Katseluyhteyden avaaminen viranomaiselleTiHL
24 §: Tietoaineistojen luovuttaminen teknisen rajapinnan avulla muille kuin viranomaisilleTiHL
DE.AE-1: Baseline of network operationsNIST
HAL-04.5: Suojattavat kohteet - riippuvuudetJulkri
62: Henkilötietojen käsittelyssä käytettyjen järjestelmien tunnistaminenDigiturvan kokonaiskuvapalvelu
CC6.1a: Identification and listing of assetsSOC 2
21.2.i (assets): Asset managementNIS2
9.5 §: Suojattavan omaisuuden hallintaKyberturvallisuuslaki
Technical review of data systems
Critical
High
Normal
Low
4
requirements
System management
Data system management

Technical review of data systems

This task helps you comply with the following requirements

Article 26: Advanced testing of ICT tools, systems and processes based on TLPTDORA
4.1: Tietojärjestelmien tietoturvallisuusTiHL tietoturvavaatimukset
PR.DS-6: Integrity checking mechanisms are used to verify software, firmware, and information integrity.CyberFundamentals
Removing unnecessary software and network services
Critical
High
Normal
Low
7
requirements
System management
Data system management

Removing unnecessary software and network services

This task helps you comply with the following requirements

SEC-03: Removing unnecessary software and network servicesCyber Essentials
2.3.3: Deactivate unnecessary functionalityNSM ICT-SP
PR.PS-02: Software managementNIST 2.0
2.3: Address Unauthorized SoftwareCIS 18
4.8: Uninstall or Disable Unnecessary Services on Enterprise Assets and SoftwareCIS 18
9.4: Restrict Unnecessary or Unauthorized Browser and Email Client ExtensionsCIS 18
Article 13.1(.2.j): Limit attack surfacesCRA
Managing licensed software
Critical
High
Normal
Low
4
requirements
System management
Data system management

Managing licensed software

This task helps you comply with the following requirements

SUM-01: Managing licensed softwareCyber Essentials
2.8.3: Only use supported email clients, browsers and pluginsNSM ICT-SP
2.1: Establish and Maintain a Software InventoryCIS 18
2.2: Ensure Authorized Software is Currently SupportedCIS 18
Documented procedures and supervision for critical admin operations on used data systems
Critical
High
Normal
Low
2
requirements
System management
Data system management

Documented procedures and supervision for critical admin operations on used data systems

This task helps you comply with the following requirements

CLD 12.1: Operational procedures and responsibilitiesISO 27017
CLD 12.1.5: Administrator's operational securityISO 27017
The principle of least functionality in systems
Critical
High
Normal
Low
6
requirements
System management
Data system management

The principle of least functionality in systems

This task helps you comply with the following requirements

PR.PT-3: Principle of least functionalityNIST
PR.PT-3: The principle of least functionality is incorporated by configuring systems to provide only essential capabilities.CyberFundamentals
2.2.2: Design the ICT system using ICT products which integrate wellNSM ICT-SP
2.3.3: Deactivate unnecessary functionalityNSM ICT-SP
Article 13.1(.2.j): Limit attack surfacesCRA
§ 10.c: Nettverkssegmentering og privilegierNIS2 NO
Implementing processes for improving resilience
Critical
High
Normal
Low
2
requirements
System management
Data system management

Implementing processes for improving resilience

This task helps you comply with the following requirements

PR.PT-5: Mechanisms NIST
Tietojärjestelmien vikasietoisuus ja toiminnallinen käytettävyys
Critical
High
Normal
Low
3
requirements
System management
Data system management

Tietojärjestelmien vikasietoisuus ja toiminnallinen käytettävyys

This task helps you comply with the following requirements

HAL-17.1: Tietojärjestelmien toiminnallinen käytettävyys ja vikasietoisuus - saavutettavuusJulkri
4.1: Tietojärjestelmien tietoturvallisuusTiHL tietoturvavaatimukset
4.3: Vikasietoisuuden ja toiminnallisen käytettävyyden testausTiHL tietoturvavaatimukset
Maintenance of security documentation for information processing environments
Critical
High
Normal
Low
2
requirements
System management
Data system management

Maintenance of security documentation for information processing environments

This task helps you comply with the following requirements

TEK-17.2: Muutoshallintamenettelyt - dokumentointiJulkri
I-16: SECURITY THROUGHOUT THE INFORMATION PROCESSING ENVIRONMENT LIFE CYCLE - CHANGE MANAGEMENTKatakri 2020
Availability of data systems and procedures to protect their availability
Critical
High
Normal
Low
16
requirements
System management
Data system management

Availability of data systems and procedures to protect their availability

This task helps you comply with the following requirements

TEK-22: Tietojärjestelmien saatavuusJulkri
TEK-22.1: Tietojärjestelmien saatavuus - saatavuutta suojaavat menettelytJulkri
31: Toipumissuunnitelmat kriittisille järjestelmilleDigiturvan kokonaiskuvapalvelu
Article 7: ICT systems, protocols and toolsDORA
Article 9a: ProtectionDORA
4.1: Tietojärjestelmien tietoturvallisuusTiHL tietoturvavaatimukset
PR.IR-04: Resource capacityNIST 2.0
RC.RP-03: Integrity of backups and other restoration assetsNIST 2.0
Article 34: ICT operations securityDORA simplified RMF
§ 5-2: Beskyttelse av skjermingsverdig informasjonSikkerhetsloven
Saatavuusvaatimuksia omaavien järjestelmien valvonta
Critical
High
Normal
Low
1
requirements
System management
Data system management

Saatavuusvaatimuksia omaavien järjestelmien valvonta

This task helps you comply with the following requirements

TEK-22.2: Tietojärjestelmien saatavuus - palveluiden valvontaJulkri
Data segregation procedures in backup systems (CL IV)
Critical
High
Normal
Low
2
requirements
System management
Data system management

Data segregation procedures in backup systems (CL IV)

This task helps you comply with the following requirements

TEK-20.1: VarmuuskopiointiJulkri
I-20: SECURITY THROUGHOUT THE INFORMATION PROCESSING ENVIRONMENT LIFECYCLE - BACKUP COPIESKatakri 2020
Protection of data systems during audit-related testing
Critical
High
Normal
Low
3
requirements
System management
Data system management

Protection of data systems during audit-related testing

This task helps you comply with the following requirements

8.34: Protection of information systems during audit testingISO 27001
5.2.6: IT System ManagementTISAX
8.34: Bescherming van informatiesystemen tijdens auditsNEN 7510
Management of information systems and devices in systems management
Critical
High
Normal
Low
19
requirements
System management
Data system management

Management of information systems and devices in systems management

This task helps you comply with the following requirements

43: Tietojärjestelmien ja laitteiden hallintaDigiturvan kokonaiskuvapalvelu
ID.AM-2: Software platforms and applications used within the organization are inventoried.CyberFundamentals
ID.AM-08: Managing organizational IT-assets throughout their life cyclesNIST 2.0
PR.AA-01: Management of identities and credentialsNIST 2.0
30 § 3.9° (actifs): Gestion des actifsNIS2 Belgium
14.5.10.c): Turto valdymasNIS2 Lithuania
19.2.i (assets): Asset managementNIS2 Malta
23.3.i (actief): ActivabeheerNIS2 Netherlands
3.1.7 (tillgångar): TillgångshanteringNIS2 Sweden
Artículo 15.2.i (Activos): Gestión de activosNIS2 Spain
Use of certified ICT products, services and processes
Critical
High
Normal
Low
4
requirements
System management
Data system management

Use of certified ICT products, services and processes

This task helps you comply with the following requirements

Art 27: Uso di schemi di certificazione della cybersicurezzaNIS2 Italy
21.1: The use of certified products, services and processesNIS2 Malta
30: Use of cyber security certification schemesNIS2 Ireland
Article 23: Critical network and specialized cybersecurity product security certificationCSL (China)
Phasing out outdated ICT products
Critical
High
Normal
Low
3
requirements
System management
Data system management

Phasing out outdated ICT products

This task helps you comply with the following requirements

2.1.2: Procure modern and up-to-date hardware and softwareNSM ICT-SP
2.3.8: Do not deactivate exploit protection functionsNSM ICT-SP
Article 34: ICT operations securityDORA simplified RMF
Identification and management of shadow IT
Critical
High
Normal
Low
4
requirements
System management
Data system management

Identification and management of shadow IT

This task helps you comply with the following requirements

9.2.2: User access provisioningISO 27001
5.18: Access rightsISO 27001
1.1.5: Identify the organisation’s deliverables, information systems and supporting ICT functionsNSM ICT-SP
5.18: ToegangsrechtenNEN 7510
The competence and responsibilites of the personnel maintaining data systems
Critical
High
Normal
Low
3
requirements
System management
Data system management

The competence and responsibilites of the personnel maintaining data systems

This task helps you comply with the following requirements

6.5: Tietojärjestelmien asennus, ylläpito ja päivitysOmavalvontasuunnitelma
6.6: Tietojärjestelmien asennus, ylläpito ja päivitysTietoturvasuunnitelma
4.1: Tietojärjestelmien tietoturvallisuusTiHL tietoturvavaatimukset
Carrying out information security inspections periodically and in exceptional situations
Critical
High
Normal
Low
2
requirements
System management
Data system management

Carrying out information security inspections periodically and in exceptional situations

This task helps you comply with the following requirements

TEK-17.1: Muutoshallintamenettelyt - uudelleenarviointiJulkri
CC7.1: Procedures for monitoring changes to configurationsSOC 2
Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
Data system management
of the framework  
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
No other tasks found.
Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessments
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security