In many years of working in data protection and information security at various larger and smaller companies, I have heard one sentence time and again: "We finally need a software solution to rationalise our data protection and information security processes!

Anyone looking for a professional, integrated solution for this task area must fulfil the following minimum requirements:

• Simple, Intuitive User interface in the technical language of the company and those responsible and affected, not that of lawyers
  
  
• Fulfilment of the Documentation obligations in data protection and information security, in particular the ability to document processing activities completely and plausibly and to analyse the structure of information security in the company on the basis of the Business processes to organise.
  
  
• to identify risks in data protection and information security in a complete, plausible and reproducible manner and to implement the risk treatment in accordance with the General principles of risk management (effects, probabilities of occurrence, measures to protect the warranty objectives, ...) to be organised
  
  
• Possibility of creating complete, plausible, reproducible Data protection impact assessments (DPIA), taking into account all processing circumstances, technology and warranty objectives in accordance with the Standard Data Protection Model (SDM)
  
  
• Measures (TOM) for data protection and information security together, to combine both perspectives "interlock"
  
  
• Genuine Process managementAutomated notifications for incidents and requests, automatic scheduling, tickets and tasks
  
  
• PDCA cycles, resubmissions, prioritisations
  
  
• Vulnerability management, Automatic "notifications" and risk references to business processes and process owners in the event of untreated risks and vulnerabilities
  
  
• Automated processing of Enquiries from affected parties
  
  
• Provision of meaningful Templates and examples