JSP-InformationSecurity™
Organisation-wide information security improvement
SaaS environmentOn-premises
ⓘ What do the product labels mean?
SaaS environment The solution can be installed in the customer’s own or customer-controlled cloud or SaaS environment.
On-premises The solution can be installed in the customer’s local server or virtual environment.
Managed service We can handle the solution’s maintenance, updates, and technical administration.
How the solution works
JSP-InformationSecurity™ brings company security risks, controls, incidents, audits, and compliance work into one managed system. Responsibilities, findings, and corrective actions remain visible and traceable.
Key benefits
The solution maintains a risk register and stores policies, evidence, and review results related to controls and requirements. It supports continuous security improvement and preparation for frameworks and obligations such as GDPR, NIS2, and ISO 27001.
Installation and Commissioning
JSP-InformationSecurity™ can be implemented with CISO Assistant Community. The solution can be installed in the customer's own server environment or provided as a managed service by JSP-IT Solutions Oy. Onboarding can include organisational scopes, a risk model, selected frameworks, controls, responsibilities, audits, incident handling, permissions, backups, and training.
Who the solution is for
For organisations that want a planned approach to information security, access management, certificates and threat detection.
Discuss JSP-InformationSecurity™ implementation
Explore other solutions in the Security and identities category.
Back to JSP-Product™ main page.
Features and technical implementation
Name: CISO Assistant Community.
Development: CISO Assistant Community is an AGPLv3-licensed open-source GRC solution. Pro and Enterprise components in the same repository are commercially licensed. See the source code and licence boundary on GitHub.
Info: The Community edition supports risks, controls, audits, findings, privacy processing, corrective actions, and numerous compliance frameworks. Production deployments use a stable release rather than the development branch directly.
Content of delivery: Delivery includes the agreed server solution, installation, basic configuration, selected frameworks, and separately agreed data imports, workflows, integrations, and training.
Price: We do not charge for the open-source Community software, only for server resources, onboarding, configuration, integrations, and maintenance. Commercial features are licensed separately when required.
Integrations and scope
The system supports compliance management, but deploying it alone does not make an organisation compliant or certified. Technical protection is complemented by JSP-Backup™, JSP-PasswordVault™, and JSP-NetworkMonitoring™.
