Help Center

Start by creating your tenant profile, inviting core users, and setting ownership fields for risks and controls. Then import your baseline catalogue before adding custom items.

Yes. Use Risk Catalogues to import BSI IT-Grundschutz or NIST SP 800-30 entries, then map categories, ownership, and scoring defaults during import.

Use inherent for pre-control exposure, residual for current exposure after controls, and target for the planned level after treatment. Keep rationale updated on each score change.

Create an assessment, assign it to a vendor, then share the secure portal link. Responses can be reviewed, approved, and reused in follow-up cycles.

Attach evidence directly to controls, track freshness and expiry, and review open findings and failed tests together to maintain control health.

Use a consistent lifecycle from open to remediation and closure, assign owners and due dates, and link related risks and controls so remediation is fully traceable.

Use the billing section in Settings to open the plan/portal flow. Plan updates apply immediately or at period boundaries, depending on your billing settings.

Your plan remains active through the paid term. After expiration, tenant access is limited and retention follows your configured contractual terms.

Use client roles for tenant users (viewer, contributor, approver, admin) and provider roles for managed-service operations (operator, super_admin). Keep least privilege enforced.

Use reporting/export actions from dashboards and registries. Export outputs can include risk or findings datasets for board reporting and evidence packages.