{"id":25,"date":"2022-11-25T14:26:00","date_gmt":"2022-11-25T13:26:00","guid":{"rendered":"https:\/\/buchholz-software.de\/?page_id=25"},"modified":"2025-12-09T08:03:19","modified_gmt":"2025-12-09T07:03:19","slug":"anyva-grc","status":"publish","type":"page","link":"https:\/\/buchholz-software.de\/en\/anyva-grc\/","title":{"rendered":"Anyva GRC"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tThe platform<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

GRC solution for data protection, ISMS and risk management<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ANYVA connects DSMS, ISMS and risk management on a common data model \u2013 process-based, auditable and without redundant data maintenance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nArrange a demo<\/a>\nWhy ANYVA<\/a>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n

Module at a Glance<\/p>\n

\n
\u2713<\/span>Data Protection Management System (DPMS)<\/div>\n
\u2713<\/span>Information Security (ISMS)<\/div>\n
\u2713<\/span>Risk management<\/div>\n
\u2713<\/span>Vulnerability management<\/div>\n
\u2713<\/span>Audit management<\/div>\n
\u2713<\/span>Tasks & PDCA<\/div>\n<\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tThe approach<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

From process to compliance \u2013 automatically<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ANYVA doesn't start with documents, but with business processes. From a captured process, VVT entries, risks, TOMs and evidence are created \u2013 uniquely, consistently, without manual transfer.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n1<\/span>\n
Capture process<\/strong>

Create a business process with data flow, systems, and responsible parties.<\/p><\/div><\/div>

\n2<\/span>\n
Derive VVT<\/strong>

Processing activities arise automatically from the process model.<\/p><\/div><\/div>

\n3<\/span>\n
Assess risks<\/strong>

Assess data protection and IT risks in a structured manner from the process context.<\/p><\/div><\/div>

\n4<\/span>\n
Control measures<\/strong>

Manage and check the effectiveness of TOMs, tasks, and tests on PDCA.<\/p><\/div><\/div>

\n5<\/span>\n
Retrieve proof<\/strong>

Comprehensive audit trail for authorities, audits and certifications \u2013 accessible at any time.<\/p><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWhat that means<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n
\n No duplicate entries<\/strong>\n

Process data, assets and measures are created once and have an effect across all GRC areas.<\/p>\n<\/div>\n

\n TOMs for DSMS and ISMS jointly<\/strong>\n

Technical and organisational measures are maintained once \u2013 not twice for two systems.<\/p>\n<\/div>\n

\n DSFA from existing data<\/strong>\n

Data protection impact assessments are created based on real process and risk data \u2013 not as an empty template.<\/p>\n<\/div>\n

\n Audit trail at the push of a button<\/strong>\n

Every decision, action, and test is documented with a timestamp and origin.<\/p>\n<\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Architecture<\/p>\n

How the modules work together<\/h2>\n

The individual modules of ANYVA share a common data model. Changes in one area automatically apply to others \u2013 without manual synchronisation.<\/p>\n

\n
\n
Conventional tool landscape<\/div>\n
\u2717<\/span>DSMS Tool (Separate)<\/div>\n
\u2717<\/span>ISMS tool (separate)<\/div>\n
\u2717<\/span>Risk tables (Excel)<\/div>\n
\u2717<\/span>Scanner Reports (PDF)<\/div>\n
\u2717<\/span>Audit Documentation (Manual)<\/div>\n
No common data status \u00b7 Gaps \u00b7 Duplication of effort<\/div>\n<\/div>\n
\n
ANYVA Platform<\/div>\n
Common Process Model<\/div>\n
\n
DSMS<\/div>\n
ISMS<\/div>\n
Risks<\/div>\n
Weak points<\/div>\n
Measures<\/div>\n
Auditing<\/div>\n<\/div>\n
TOMs \u00b7 Evidence \u00b7 Audit Trail<\/div>\n
A data model \u00b7 Automatic effectiveness \u00b7 Verifiable proof<\/div>\n<\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tModule<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

All areas. One platform.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ANYVA is made up of integrated modules \u2013 usable individually, but most effective as a complete system.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nGDPR<\/span>\n
\ud83d\udd12<\/div>\nData Protection (DSMS)<\/strong>\n

VVT, DSFA, data subject rights and contract processing \u2013 process-based and fully auditable.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nISO 27001<\/span>\n
Shield<\/div>\nInformation Security (ISMS)<\/strong>\n

Assets, Risks, Control Objectives and Measures according to ISO 27001, BSI-Grundschutz and NIS-2.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nGRC<\/span>\n
Scales<\/div>\nRisk management<\/strong>\n

Risk assessment from processes and assets \u2013 together for data protection and information security.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nNIS-2<\/span>\n
\ud83d\udd0d<\/div>\nVulnerability management<\/strong>\n

Link CVEs with assets, processes, and data protection risks \u2013 immediate impact visible.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nAudit<\/span>\n
\u2705<\/div>\nAudit management<\/strong>\n

Plan, conduct and document internal audits. Seamless evidence for external audits.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\nPDCA<\/span>\n
\ud83d\udccb<\/div>\nTasks & PDCA<\/strong>\n

Measures, training, and examinations with deadlines, responsible parties, and effectiveness checks.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Supported Standards<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\ud83d\udcdc<\/div>GDPR<\/strong>

Articles 30, 32, 35<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\ud83d\udd10<\/div>ISO 27001<\/strong>

ISMS certification<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
The Acropolis<\/div>BSI-Grundschutz<\/strong>

IT security<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\ud83c\udf10<\/div>NIS-2<\/strong>

Network and Information Security<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\ud83d\udccb<\/div>DSFA \/ VVT<\/strong>

Documentation obligations<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ANYVA supports structured implementation \u2013 certifications additionally require external audits.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Meet ANYVA<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In a demo, we will show how ANYVA can be implemented in your organisation.<\/p>\n

\nArrange a demo<\/a>\nWhy ANYVA<\/a>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Datenschutz, Informationssicherheit & Risikomanagement Vollst\u00e4ndig prozessbasiertes Management ANYVA revolutioniert die Art und Weise, wie Datenschutz-Management-Systeme (DSMS) aufgebaut sind. W\u00e4hrend klassische DSMS formularbasiert arbeiten und isolierte Verarbeitungsverzeichnisse (VVT) f\u00fchren, bildet ANYVA den Datenschutz vollst\u00e4ndig prozessbasiert ab. Das bedeutet: Verarbeitungst\u00e4tigkeiten werden nicht manuell erfasst, sondern systematisch aus den tats\u00e4chlichen Gesch\u00e4ftsprozessen abgeleitet. Diese Architektur erm\u00f6glicht eine konsistente und […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-25","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/pages\/25","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/comments?post=25"}],"version-history":[{"count":79,"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/pages\/25\/revisions"}],"predecessor-version":[{"id":1735,"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/pages\/25\/revisions\/1735"}],"wp:attachment":[{"href":"https:\/\/buchholz-software.de\/en\/wp-json\/wp\/v2\/media?parent=25"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}