One engine. Ten modules. One data core.
Each module overlays its own regulatory perspective on the same graph of processes, systems and suppliers. See what each one looks like from the inside.
Iodynka (GDPR)
Full GDPR on a single graph: processing activity register, DPIA with the WP248 engine, data subject requests and a 72-hour breach counter. Enter once, use everywhere.
- RCPArt. 30 register with inheritance from processes
- DPIAWP248 + the Polish DPA blacklist catalogue automatically
- DSRData subject request portal, 30-day timeline
- 72HBreach counter with escalation
DORA
Operational resilience for the financial sector: ICT provider register, concentration risk, RTO mismatch detection and export to the Polish FSA (KNF).
- CRITClassification per critical function
- CONCAlert when >25% with a single provider
- RTOAuto-signal when contract exceeds BIA
- KNFSPR-PF-18 export
NIS2 / KSC
NIS2 and the Polish cybersecurity act in practice: entity profile, 24h/72h/30d CSIRT notification timelines and mapping of the 10 Art. 21 areas.
- PROFILEssential or important, auto-classification
- 24/72CSIRT notification timelines
- ART.2110 areas of technical measures
- CHAINSupply chain security assessment
AI Act
AI governance aligned with the AI Act: system risk classification, FRIA, human oversight definition and AI Literacy.
- RISK4 AI system risk levels
- FRIAFundamental rights impact assessment
- HUMANHuman oversight defined
- LITAI Literacy for the team
Risk Engine
Risk heatmap with information assets. ISO 27005 or a custom methodology, residual risk calculated after controls, KRI with thresholds.
- METODAISO 27005, NIST 800-30, custom scale
- KATALOGThreat catalog, vulnerability catalog
- RESIDUALAuto-recalculation after controls
- KRIThresholds with alerts in Signal Engine
Maturity Model
Security maturity: ISO 27001 + NIST CSF + ISO 42001 with cross-control mapping, CMM heatmap and gap analysis.
- CMMMaturity scale 0-5
- MAPCross-framework mapping
- GAPGap closure plan
- ROADRoadmap per control
CISO / ISMS
The CISO's workspace on a single dashboard: ISMS, controls, risk, business continuity and cross-regulation without switching between tools.
- ISMSPolicies and procedures
- CTRLAnnex A controls
- BCMBusiness continuity
- CROSSMultiple regulations, one core
ISO 27001
ISO/IEC 27001:2022: 93 Annex A controls, evidence tracker, mapping to other regulations and certification readiness.
- 93Annex A 2022 controls
- EVIDEvidence linked to controls
- MAPCross-mapping with DORA/NIS2
- SOAStatement of applicability
ISO 22301
Business continuity management (BCMS): business impact analysis (BIA), BCP plans, scenarios, tests and crisis communication tree.
- BIARTO/RPO per process
- BCPContinuity plans
- TESTExercise cycle
- COMMCommunication tree
ISO 31000
Risk management per ISO 31000: a single unified register, 4D scoring, PDCA cycle and KRI with alerts.
- REGSingle unified risk register
- 4DFour-dimensional scoring
- PDCAContinuous improvement cycle
- KRIKey risk indicators with alerts
See the modules live.
30 minutes, demo on real data. We show exactly the modules relevant to your business.