Knowledge out of the box
What is knowledge-out-of-the-box.
In the course of our long consulting experience, we have realized that there are two types of activities: those deserving to be paid for, however expensive they may be, and those that should not be the subject of advice.
The first category includes ideas, knowledge and innovative procedures brought along by capable and competent people, diverse experiences, and the opportunity to gain valuable insights of other companies behaviour. These are high-value activities, and in a Data-Information-Knowledge-Wisdom type of model, they are at the top level.
The second category includes all formalisation activities (for example, document title book and approval flow management), analysis and study of international standards and applicable regulations (for example data protection regulations), and the drafting of appropriate documentation to support the organisation. In the above model all this is located just below Wisdom.
We believe customers should have access to this type of knowledge without having to pay for it every time; that’s why, in developing our product we have used, whenever possible, a knowledge-out-of-the-box approach. This means that many USP modules are not “empty boxes”.
Core Module.
- Checklists and Standards Management. Used for loading and updating the existing security measures. These can be collected based on international standards or according to the organization's own criteria.
- Non-conformities. Based on the ISO model, it manages the entire life cycle and relationships, following a many-to-many logical design with respect to corrective actions.
- Corrective Actions. As with non-conformities, complete management is possible. Configurable workflows allow the assignment of tasks to carry out non-conformity correction activities.
- Projects. Declined according to the logic of the improvement actions defined in the ISO standards, this module allows to manage and monitor all the project related activities having an impact on safety. As with corrective actions, workflow configuration is possible.
- Reminder. FThis feature allows you to create timed custom alerts for yourself and others. The functionality propagates to all other modules.
Knowledge-out-of-the-box.
Modulo Document Management.
Management of policies, procedures and operating instructions in ISO-Like mode. Thanks to this feature, this module can be used with any certification (9001, 14000, etc.), thus representing a good starting point for the creation of a security management system. Supports the setup of multi-level approval flows.
- Documents Update. In addition to full versioning support, the system allows you to automatically manage the title blocks (revision, history of changes, associated controls, approvals, versioning, etc.) on the actual document thanks to the possibility of enriching each object with metadata.
- Non-resident Documents. If you have policies or procedures that are managed in a different system (another document management system, file servers, etc.), these can still be referenced through links and managed as if they were located within the module itself.
- SOA (Statement of Applicability). The document, specific and mandatory for ISO 27001 certification, is generated automatically once the module has been populated.
Knowledge-out-of-the-box.
Memori - Risk Management
Module .
- Risk Management Mode Based on the results of the analysis, it is possible to perform "what if" simulations within the dashboard by modifying the perimeter, merging assets, selecting specific threats. Through the “ranking" function, the tool highlights the most critical assets and suggests the controls to be checked based on effectiveness and efficiency criteria, in order to achieve maximum risk reduction according to the built scenario. The status change is represented in real time on the matrix and histograms.
- Questionnaires: The module is equipped with a powerful engine for the management of questionnaires aimed at gathering information related to assets, threats, controls and vulnerabilities.
- GDPR: It integrates the processing activities management with the execution of the risk analyses that the implementation of DPIA (Data Protection Impact Assessment) is based on.
Knowledge-out-of-the-box.
Audit Module .
- Repository.Centralized storage of materials and automatic management of audits history. In particular, through the configuration of information flows and the reminder functionality, it allows to manage audit preparation activities. Provides a specific read-only view for the auditor, with the ability to directly access the core module in order to open a non-conformity.
- Cross compliance. "Recovery and reuse” of evidence according to the goal of the audit. This mechanism allows to manage the evidence life cycle, automating their availability for the different standards and regulations to which they are applicable.
Knowledge-out-of-the-box.
Security Incident Management module .
- Source Integration. Through appropriate customization, it allows automatic import of event data from different sources (SOCs, Ticketing Systems), based on the criteria chosen by the organization.
- Knowledge Base. The module maintains the correlation between non-conformities and corrective actions as Lessons Learned, and interfaces with Memori in order to provide “historical" indications helping to define the likelihood levels of threat occurrence.
Knowledge-out-of-the-box.
a system of DI. GI. Academy Srl
V.le P. A. Pirelli 6, 20126 Milano P.IVA 06249920965
C.C.I.A.A. REA: MI - 1880014 Cap. Soc. € 12.000,00
This email address is being protected from spambots. You need JavaScript enabled to view it.
Who we are
DI.GI. Academy is a company which has been active since 2008 in professional training, software development using advanced technologies, ICT governance and organization consultancy . The three departments of DI.GI. Academy (Training, Consultancy and Software Developments) work together to help customers in many different sectors, from manufacturing to finance and services, to reach their business goals.