ESM is moved to Swedish ISO/IEC27001 certified Cloud Provider.

Improved process modelling functionality Top level processes are now possible to layout just as in the other process diagrams. It is now possible to select o...

Fixed performance issues in large models. Added functionality for administrator to set values for SMS OTP timeout.

Improvements regarding Named Organizations, Search Filters, ISO/IEC 27001 and ISO/IEC27002 available in Swedish, creating a SOA for chapter 4-10 in ISO/IEC27...

"Conventional wisdom dictates that an increase in cybersecurity threats requires ever-larger IT Security teams", the report provides some insights in how to ...

Hotfix: confusing special case of information classification An information object inheriting attributes with lower classification also inherited their class...

Named Organizations A list of external organizations has been added under Resources. The fields for Controller, Processor(s) and Third party recipients of pe...

Event History All changes (creations, updates and deletions) are stored and viewable either in a global history table or per object. The start page now shows...

Language support ESM is now available also in Swedish. Various minor fixes The date a risk analysis was closed is now shown in the closed risk analysis table...

Updates to risk module Assets and risks are now part of a selected risk analysis.

Live model updates for simultaneous users All updates a user makes in ESM are now immediately propagated to all other logged in users. Bug fixes for session ...

Demands & Statements on processes and documents Statement(s) of Applicability (of ISO 27000) can set demands for security controls on processes and documents...

Innovate och SIS - Svenska Institutet för Standarder - lanserar tillsammans SIS-ESM; ett praktiskt och effektivt sätt att arbeta med ISO 27000. Läs mer här. .

Minor fixes in the risk identification module New ISO standards in the 27000-series added

Major release with new fundamental functionality: Support for Risk Analysis with a simplified workflow based on ISO standards. Improved and enhanced function...

Security Mechanisms Using Security Mechanisms is a way for organisations to detail how they interpret and intend to implement controls from standardized fram...

Continuing our discussion on a few trends within Information Security, here are trend 5 and 6. You are free to use this information as you wish, but please m...

Continuing our discussion on a few trends within Information Security, here are trend 2, 3 and 4. You are free to use this information as you wish, but pleas...

The purpose of Information Security is to protect organisation’s business and their employees. In order to prioritise investments and resources it is importa...

New field, 'applicable law', in processing form When legal ground 'compliance with legal obligations' is selected, the applicable law can now be specified Va...