
YOUR COCKPIT FOR SAFE AND
COMPLIANT CORPORATE GOVERNANCE
TIME-SAVING. OVERVIEWED. INTUITIVE.
Have you previously perceived the world of GRC and IT security as a tedious and time-consuming duty? The coordination of processes, guidelines and standards is complex and constant changes make it difficult to maintain an overview?
Thanks to QSEC, this is a thing of the past: With our holistic software, we offer a complete solution that not only elegantly combines your governance, risk and compliance requirements, but also integrates your data and IT security, including all relevant standards.
The individual adaptability of QSEC is your key to a tailor-made solution that fits perfectly into your industry-specific and internal specifications. Take a relaxed and worry-free approach to certification processes: QSEC guides you purposefully through any operational processes, enabling you to minimize risks and master compliance with confidence.
With QSEC, you are choosing a solution with which time savings, efficiency and comprehensive coverage are no longer pipe dreams, but your new reality.
Basic functions
Included in all QSEC editions
Basic functionalities
Centralized search for managed elements (e.g. measures, responsibilities, ...) and configurable data filtering.
Measures management
Enables centralized maintenance, evaluation and rejection of measures.
Compliance
Storage of compliance requirements (laws, guidelines, standards, etc.) and evaluation according to various maturity models.
Information Asset Management
Storage of business processes, IT assets and information values. The module is the basis for assessments in the context of ISMS and data protection.
Data protection
Recording and evaluation of GDPR requirements including contract management (DL and AV contracts) and data protection impact assessment.
Incidents
Separate area for processing security incidents, can be linked to other modules (e.g. IT risk, data protection, IT assets, processes, etc.).
IT risk management
Risk management process for IT assets in accordance with the ISO 27005 and/or BSI IT-Grundschutz methodologies.
Document and contract management
Management of IT and information security documents, supported by workflows for document maintenance (approvals, recertifications, distribution).
OPTIONAL ADDITIONAL MODULES
Expand QSEC performance in a targeted manner
Business Continuity Management (BCM)
The BCM module implements the requirements of ISO 22301 and BSI IT-Grundschutz 100-4/200-4:
- Analysis of business processes through a BIA (Business Impact Analysis)
- Continuation of the GAP analysis of related resources
- Management of emergency planning documents
- Evaluation and communication of analyses in the reporting area
Service provider management
This module implements an end-to-end service provider management process:
- Identification of service providers, required tests and assessments
- Complex contract management
- Compliance with extended legal requirements such as the Supply Chain Act
- Tracking and evaluation of analyses in the reporting area
- Generating audit reports or reports for the management
- Freely adjustable information content
Working according to BSI IT-Grundschutz
The module supports the procedure methodology of IT-Grundschutz and the associated fulfillment of standards 200-1 and 200-2:
- Provision and prompt updating of the IT baseline protection compendia
- Use and evaluate the requirements / hazards specified in the compendia on the assets provided for this purpose
- Automated valuation transfer
- Asset-related transfer of relevant requirement and hazard assessments from old compendia to current versions
CONNECTIVITY PAKEt
In addition to the basic functions, you can use the integrated connectivity package from the QSEC Professional Edition onwards, which specifically extends your QSEC range of functions.
- AD import
- Use of the QSEC API
- Extended administration (customization of functionalities and user interface)
- Event and incident recording app (reporting of security incidents without logging into QSEC)
- Catalog entry and maintenance tool (configuration of QSEC catalogs in the compliance function for individual adaptation or new creation)
- Project recording application (recording of project activities without accessing QSEC)
QSEC STANDARDS
Key standards by industry
Depending on the QSEC edition, you can select standards.
The basic GDPR and ISO 27001 standards are included in every edition.
Standards are available for which the licensor updates the questionnaire of the respective standard within 12 months of publication – and standards for which the licensor only updates the respective questionnaires on request for a fee.
Cross-industry standards
- ISO 27001
- ISO 27005
- ISO 22301
- EU GDPR
- ISO 9001
- ISO 14001
- ISO 20000
- ISO 45001
- BSI IT baseline protection
- NIS 2
Water
- B3S Water
Health
- B3S Health
- ISO 13485
- IEC 80001
Energy
- ISO 27019
- IT security catalog
- DIN SPEC 27009
- DIN ISO 50001
- Smart meter
- Gateway
- B3S Energy
Finances
- BaFin BAIT
- BaFin KAIT
- BaFin VAIT
- BaFin MaRisk
- Basel II
- PCI DSS
- DORA
Trade/Services
- PCI DSS
Industry/Automotive
- VDA TISAX
- IATF 16949 - Automotive QM
Logistics
- Tapa
- ISO 28000
- Customs
Authorities
- BSI Standards 200-1
- BSI Standards 200-2
- BSI Standards 200-3
- BSI Standards 200-4
- BSI IT basic protection
- Compendiums
Cross-industry standards
- ISO 27001
- ISO 27005
- ISO 22301
- EU GDPR
- ISO 9001
- ISO 14001
- ISO 20000
- ISO 45001
- BSI IT baseline protection
- NIS 2
Water
- B3S Water
Health
- B3S Health
- ISO 13485
- IEC 80001
Energy
- ISO 27019
- IT security catalog
- DIN SPEC 27009
- DIN ISO 50001
- Smart meter
- Gateway
- B3S Energy
Finances
- BaFin BAIT
- BaFin KAIT
- BaFin VAIT
- BaFin MaRisk
- Basel II
- PCI DSS
- DORA
Trade/Services
- PCI DSS
Industry/Automotive
- VDA TISAX
- IATF 16949 - Automotive QM
Logistics
- Tapa
- ISO 28000
- Customs
Authorities
- BSI Standards 200-1
- BSI Standards 200-2
- BSI Standards 200-3
- BSI Standards 200-4
- BSI IT basic protection
- Compendiums
Frequently asked questions
The first step is to assess your specific security and compliance requirements and then choose ISMS software that meets those requirements. Many vendors, such as QSEC, offer demo versions or consultations to help you choose the right solution and facilitate the implementation process.
The ISMS software QSEC helps your company to protect sensitive data, meet compliance requirements, minimize security risks and increase efficiency in the management of security processes. It enables the centralized management of security policies, risk assessments, compliance checks and preparation for external audits.
QSEC is flexibly designed to meet the needs of organizations of all sizes. QSEC offers scalable solutions that can grow with your business and adapt to your changing security and compliance requirements.
QSEC provides organizations with step-by-step guidance, best practices and ready-made templates to prepare for certifications such as ISO 27001. The software simplifies the process of meeting certification requirements by automating workflows and providing documentation and evidence management tools.
QSEC provides advanced reporting and analysis capabilities, including customizable dashboards and in-depth security posture assessment analytics. It enables the generation of compliance reports, risk analyses and performance indicators to support management decisions.
QSEC enables comprehensive risk and security management by identifying, assessing, treating and monitoring security risks. Risk assessments and risk mitigation measures can be implemented in QSEC. The software supports the creation of risk treatment plans and continuously monitors the effectiveness of the implemented controls.
There are standard interfaces to the Active Directory and the mail system. Other systems can also be connected via an API.
Customer-specific enhancements can be made in the QSEC ISMS system. These enhancements, such as data fields or checklists, can be set up individually in the functions, measures, business processes, information, asset groups, documents and security incidents. Such extensions can also be implemented directly by the customer via the administration tool. Alternatively, Nexis GRC also offers this service.