360inControl
Holistic Approach to Managing Risk

It is not possible to address risk management in isolation from governance, compliance, data protection and information security,” says Andreas von Grebmer, CEO, 360inControl^®. With his years of experience working with global businesses in the information security and risk management arena, von Grebmer realized that many areas of a company, such as data privacy, information- and IT-security, and so on, are often disconnected. With different departments and functions working independently on various tasks, many redundant areas tend to develop inefficiently. This creates the need for a nucleus to address the issues raised by siloed operations in an effective and transparent manner. This created the need for a collaborative approach that was emphasized with the onset of the pandemic. With the advent of remote working limitations, the necessity for a digital, collaborative approach became even more imperative.

“With 360inControl^®, clients can have an ecosystem for governance, risk and compliance, which is configurable and scalable over time,” says von Grebmer. Swiss-based 360inControl® is a new generation of internal control systems (ICS) provider that combines GRC, information security management, data classification, and audit and evaluation management into one software. The adoption of 360inControl^® substantially promotes digitalization, centralization and sustainability, while also minimizing silo formation. Built on a comprehensive and managed control library, 360inControl^® includes requirements from ISO27001/2/5, GDPR and other global standards. 360inControl^® provides controls for a wide range of use cases, which helps expedite risk assessments easily in any industry.

With the control library, a wide range of audits and evaluations can be organized in a short amount of time. Templates can be effortlessly established and maintained for onetime or recurrent planning. Company specific controls can also be easily added and maintained. This streamlines the auditing and assessment schedule. Apart from the aforementioned software functionalities, 360inControl^® also provides a functionality to assign and manage action items. “Nothing will be overlooked as a result. The status of the action items can also be seen on the dashboards of the people in charge,” says von Grebmer.

360inControl^® caters to the objectives of its clients, assisting them on their journey to digitalization by implementing regulatory standards and actively managing risks. The company provides SaaS-based solutions that are highly secure, dependable, and ready to use for improving organizational transparency. The advantages include centralization of GRC, security, assistance with digitization and transformation, and application of international regulations, and certifications.

Further illuminating the proficiency of the software, von Grebmer explains that 360inControl^® poses as a link between the risks to business assets and audits. The company's solution supports the implementation of legal and regulatory requirements, such as operating a data processing registry. Clients can use 360inControl^® to develop a data register that enables them to analyze, value, and process business assets while adhering to data protection regulations. Adding to the value proposition of the solution, in terms of corporate security, organizations that are vulnerable to cyber-attacks should employ information security controls to protect themselves from threats. 360inControl^® serves as the foundation for putting these controls in place.

The company's holistic approach is what sets 360inControl^® apart from its competitors. It gives customers the option of accessing existing controls while also making it possible to create new ones. The company works closely with the clients, and this allows them to achieve their goals more manageable. As an added bonus, the SaaS-driven company also provides out-of-the-box solutions that can be tweaked to meet the client's unique requirements.

360inControl^® intends to release a new policy and instruction management module over the next three months. The company is now focusing on its expansion and is in the process of onboarding cyber security investors. 360inControl^® is also anticipating the deployment of a customer-driven strategy in order to improve client connection. As a result, the company's market approach will be mostly customer driven. “We listen and act more according to the voice of the customer than according to the statements of the analysts,” von Grebmer concludes.