Skip to content

Connected GRC & resilience

From governance to resilience. One connected model.

ILSERIS keeps your policies, risks, third parties, contracts, continuity plans, incidents and audits as related records on one platform. Not integrations. One model, from the obligation to the recovery plan.

Control

Access management

CTRL-017

Select a linked record to see how it relates to the control.

The problem

Risk is connected. Your tools aren't.

A supplier outage is a third-party risk, a contract question, a continuity event and an audit finding at the same time. In most organisations, each of those lives somewhere else. Someone rebuilds the picture by hand, every time.

  • Spreadsheets
  • Email threads
  • SharePoint folders
  • Point tools
  • Supplier questionnaires
  • Contract repositories
  • BIA workbooks
  • Incident tickets
  • Audit files
  • Policy PDFs
  • Regulatory trackers
  • Board decks

Twelve places to look. None of them knows what the others contain.

Connected model

One record, many uses.

Every record in ILSERIS links to the records it depends on. Follow a regulation down to the evidence, or a supplier through to the recovery plan, without leaving the platform.

From obligation to evidence

  1. Step 01Regulation
  2. Step 02Obligation
  3. Step 03Control
  4. Step 04Policy
  5. Step 05Risk
  6. Step 06Audit
  7. Step 07Finding
  8. Step 08CAPA
  9. Step 09Evidence

From supplier to recovery

  1. Step 01Third party
  2. Step 02Contract
  3. Step 03Service
  4. Step 04Asset
  5. Step 05Business process
  6. Step 06BIA (RTO/RPO)
  7. Step 07Recovery plan
  8. Step 08Exercise

Platform

Six pillars. One data model.

Start with the modules you need. Each one works on the same records, so nothing is copied between them.

  • 01

    Govern

    Frameworks, obligations, controls and policies in one place.

    • Frameworks with applicability and coverage
    • Obligations, controls, gaps and attestations
    • Policies and documents through their lifecycle
    • Exceptions, approval routes and a full audit trail
  • 02

    Third parties & Contracts

    Risks, suppliers and contracts, from onboarding to renewal.

    • Risk register with scoring and heat maps
    • Onboarding, tiering and questionnaires
    • Periodic screening of third parties
    • Contract obligations, SLAs, renewals and clauses
  • 03

    Resilience

    Know what is critical, what it depends on and how fast it must recover.

    • Assets and CMDB
    • Business impact analysis with RTO, RPO and tiers
    • Dependency map
    • DR and BCM plans
  • 04

    Respond

    Run incidents from detection to root cause.

    • Detection, triage and escalation
    • War rooms for crisis command
    • Recoveries with failover sequencing
    • Investigations and playbooks that assign tasks
  • 05

    Assurance

    Plan audits, record findings and follow actions through.

    • Audit universe
    • Engagements, including DORA and NIS2
    • Findings
    • Corrective and preventive actions (CAPA)
  • 06

    Exercise

    Test your plans before an incident does.

    • Plan resilience tests and exercises
    • Run them with the teams involved
    • Evaluate the results

AI & Automation

AI drafts incident classifications, contract extractions, risk drafts and report commentary across the pillars. A person reviews every draft and decides.

Learn more

Executive view

From operational detail to board view.

The board view reads the same records your teams work in. No separate reporting copy to keep in sync.

  • Critical services, RTO gaps, overdue CAPAs and live incidents in one view
  • Built on the records behind them, not on a quarterly spreadsheet
  • Report commentary and decisions due, drafted by AI and checked by people
Illustrative board view

Resilience loop

Built for the day things go wrong.

When an incident hits, the war room opens on records that already exist: the affected services, their recovery objectives, the plans and the suppliers involved.

After recovery, the post-incident review feeds what you learned back into risks, controls and plans. The next incident starts from a better position.

  1. Step 01Risk
  2. Step 02Incident
  3. Step 03War room
  4. Step 04Recovery
  5. Step 05Post-incident review
  6. Step 06Risk & plan updates

Lessons feed back

AI & Automation

AI drafts. People decide.

AI writes the first version: a classification, a notification, an extraction, a treatment plan. It works on your records, in context.

Nothing is final until a person accepts it. Every draft can be edited or discarded, and the decision stays with the people accountable for it.

Illustrative AI draft

Where AI drafts today

  • Third parties

    AI analyses, VAT and company enrichment, questionnaire import.

  • Contract extraction

    Obligations, clauses and invoices taken from the contract.

  • Contract follow-up

    Renewal recommendations, SLA reports and exit plans.

  • Incidents

    Classification, regulatory notification drafts, response tasks and post-incident reviews.

  • Risk

    Risk drafts, treatment plans and emerging risks.

  • Reports

    Commentary and the decisions due.

Frameworks

Map once. Show compliance everywhere.

Load the laws and standards that apply to you and map each control once. See coverage and gaps per framework, from the same controls.

  • DORA
  • NIS2
  • ISO 27001
  • ISO 22301
  • ISO 31000
  • GDPR
  • Your internal frameworks

ILSERIS supports your compliance programme. It does not certify it.

Solutions

Built for every layer of the organisation.

Each role sees its own work, on the same connected records.

  • Board & executives

    Critical services, RTO gaps, overdue actions and live incidents at a glance.

  • CRO & CISO

    Risks, controls, suppliers and incidents on one model instead of separate tools.

  • Compliance

    Map obligations to controls once, then track gaps and attestations.

  • TPRM & procurement

    Onboard, tier and screen suppliers, with their contracts on the same record.

  • Business continuity

    From impact analysis and recovery objectives to plans and exercises.

  • Internal audit

    Plan the audit universe, run engagements and follow findings to CAPA.

See ILSERIS in action.

A focused walkthrough, built around your regulatory landscape and operating model.