SENTINELISMS

An ISMS rarely fails because of the standard, mostly because of upkeep

Introducing ISO 27001 is manageable. Keeping the information security management system alive afterwards (risks up to date, evidence complete, the people responsible on the ball) is the part where many SMEs fail. Excel lists go out of date, evidence lies scattered in emails, and three weeks before the audit the panic begins.

SENTINELISMS is meant for exactly this target group: small and mid-sized companies that need ISO 27001 or TISAX (as a supplier in the automotive industry, for example) but have neither an ISMS department of their own nor the budget for an enterprise GRC suite. Instead of treating security as a tedious duty dug out once a year for the audit, SENTINELISMS relies on a motivation system: progress on controls, evidence upkeep and risk assessment is made visible, so that sticking with it is easier than putting it off.

Under the hood is a complete Laravel application with asset and risk management, control tracking, an evidence vault, an audit mode for external auditors and a hub concept for several people working together – including passwordless login with a magic link.

Core functions

• Manage ISO 27001 controls and the risk register in a structured way
• Evidence vault for proof, instead of scattered files
• Audit mode for external auditors (read-only)
• Gamified motivation system against compliance fatigue
• TISAX alignment for automotive suppliers
• Hub function for several responsible people working together

From €99 per month.

SENTINELISMS can collect evidence, structure controls and make gaps visible. It replaces neither management commitment nor the organisational effectiveness that an audit ultimately checks.