Compliance360 turns the frameworks you answer to into controls with owners, how each is done, reviews and evidence - and gathers much of that evidence for you from your other components. When the auditor comes, the audit pack is ready.
Start a free trial Free POPIA readiness check Watch how it works See the pricing Sign in to StreamSoft360
Compliance360 is one of the fourteen components of StreamSoft360 - one sign-in, one workspace, one bill.
A walkthrough on the real pages, with captions. Jump straight to the part you need.
Take Compliance360 on its own, or in a StreamSoft360 plan with the components that go with it. Monthly in Rands, excluding VAT. No setup fee.
See every plan and component on the StreamSoft360 page, or talk to us.
POPIA, PAIA, King V, the FSCA/PA Joint Standard, ISO 27001, NIST CSF, Essential Eight and Cyber Essentials - in plain words, all included.
Add a client's security requirements or an internal standard as a framework of your own.
Every control has an owner, a status and how it's done here - or why it doesn't apply.
Nine live checks: access reviews, permission findings, data scans, certificates, Active Directory, the risk register, approvals, two-step sign-in and policies.
Files, links and notes, each with a valid-until date and a warning before it lapses.
A crosswalk shows what each control also covers in POPIA, ISO 27001, NIST CSF and the CIS Controls.
How ready each framework is, as a percentage, with monthly snapshots.
Controls reviewed every 3, 6 or 12 months, with reminders to their owners.
A printable statement of applicability or summary, with every control and its evidence.
Read-only access for outside auditors - it expires, and every opening is logged.
Readiness feeds Insight360, where findings are tagged with the controls they affect.
Your data in a database of its own, roles, compulsory two-step sign-in and a full audit trail.
Every framework in the library is included, written in our own words as a working checklist. CIS Controls v8.1 appear as references on findings - the CIS Controls themselves are licensed by the Center for Internet Security.