Create and manage policies, guidelines and technical as well as organizational measures centrally – optionally AI-assisted and with audit-proof versioning. Link TOMs directly with assets and audits for comprehensive security documentation.
FRAMEWORKS
Frameworks are the foundation of every management system. Create policies, guidelines and work instructions, optionally enrich and revise content with AI assistance, version every approved state and manage the approval process in a structured way.
TOMS
Assign measures to protection requirements and maintain an overview of their implementation. A structured form and upload of existing documents make getting started easy – content can optionally be enriched with AI assistance.
FAQ
Policies are your written rules: guidelines, policy statements, work instructions and process descriptions. Technical and organizational measures (TOMs) describe the specific safeguards you implement, for example on a system. You maintain both in their own filterable overviews and link them to requirements, assets and other documents. The ISMS Cockpit shows whether a measure originates from a policy, a TOM, a risk analysis or an audit.
You link a requirement to an existing policy or measure – or start from the document itself via “Add as measure”. A new measure can be created directly while linking. For each link, you record the degree of implementation, the responsible person and a deadline, so it is clear how far a measure supports a requirement. The “Measure coverage” key figure shows the share of applicable requirements with at least one linked measure.
Yes. For technical and organizational measures, you upload existing documents for storage and complete the details in the structured form; policies take file attachments. Recurring wording is maintained as text modules, which you insert at the current text position via the toolbar and make available to specific organizations or to all of them. Larger collections from legacy systems are transferred by preeco in an individual migration project.
AI support is optional. It adds to and revises the content of policies and TOMs; you review the suggestions and decide what to adopt. AI also detects text modules with the same meaning, even when reworded; the suggestions are reviewed and the module that remains can be viewed in advance. Every AI activity is logged with function, user, model and status – so your rules are written with AI and your team.
Every time a technical and organizational measure is released, preeco automatically creates an immutable revision. In the revision overview, you compare two versions visually – additions in green, removals in red – and use stored SHA-256 checksums to check whether a revision was altered afterwards. Both are available for revisions created since this feature was introduced. The activity log shows who performed which action and when.
You set a follow-up on every policy and every measure. At the scheduled time, preeco sends an email reminder and the follow-up appears on the dashboard as a new task. You create tasks and checklists directly on the document to share the review across your team. For requirements in the ISMS Cockpit, bulk editing lets you schedule follow-ups for many requirements at once.
In a personal consultation, we will show you how preeco | information security simplifies your security management.