ISO 27001 software for your ISMS: from scope to audit.
SecTepe.Core brings your ISO/IEC 27001:2022 ISMS into one platform. Your scope, assets and risks live there. So do all 93 Annex A controls, the Statement of Applicability, your policies and your evidence. You prepare for the audit step by step. No more spreadsheets to keep up.
What ISO 27001 software needs to do
ISO/IEC 27001:2022 requires a written-down system to manage information security (ISMS). Clauses 4 to 10 say what it must cover. That means context and scope, leadership and planning. Planning includes how you assess and treat risks. Then come support, operation, checking how well it works, and improvement. You also pick controls from Annex A and say why.
An ISMS tool should tie these parts together. If not, they end up spread across spreadsheets, drives and e-mails. In SecTepe.Core, the Statement of Applicability, the audit plan and the assessment share one catalogue. It holds clauses 4 to 10 and the Annex A controls. Both come in German and English.
ISMS software: the core features for ISO 27001
Six building blocks that work closely together. TheISMS management page shows how they fit in daily work.
Scope and context
An assistant walks you through the scope of your ISMS. You note the people involved and the limits right there.
Asset management
A list of your information assets. You rate each one for confidentiality, integrity and availability.
Risk assessment
A risk matrix with scales you can adjust. A risk register logs every change. You track each treatment plan until it is done.
Annex A controls
All 93 controls of ISO/IEC 27001:2022, each with a maturity rating. You collect and manage evidence on each control.
Policy management
Templates for common security policies. Every version is kept, and approvals follow a set path.
Evaluation and improvement
Internal audits, management review, findings and fixes in one flow.
Statement of Applicability (SoA) from your current status
The Statement of Applicability (SoA) is one of the key papers in every ISO 27001 audit. SecTepe.Core builds it from your current status. It keeps every version. You can export the SoA as PDF, Excel or Word.
When a control changes, you simply regenerate the SoA. There is no document to update by hand.
Gap analysis and preparation for ISO 27001 certification
Questionnaires that adapt to your answers rate how mature your ISMS is. The gap analysis shows what is still open. It turns those gaps into a roadmap of tasks. Learn more undermulti-framework assessments.
You collect evidence right on the controls. Outside auditors or consultants see your status through their own portal. They can read, but not change, anything.
The certificate itself needs an independent audit by an accredited body. SecTepe.Core helps you meet the standard. It does not guarantee that you pass.
One ISMS tool for ISO 27001, NIS2 and other frameworks
You can manage NIS2, GDPR, BSI IT-Grundschutz, SOC 2 and other standards in the same platform. When rules overlap, you meet them once. They then count for each framework. One report across all of them shows where you stand.
Implementing ISO 27001 also lays a foundation for NIS2. TheNIS2 software page shows how SecTepe.Core handles the NIS2 obligations. When a standard changes,framework change managementhelps you keep up.
EU hosting, single sign-on and a bilingual interface
SecTepe.Core runs only in the EU. Each customer has its own walled-off space. The interface comes in German and English. You can sign in once for all apps (single sign-on) with SAML 2.0 or OIDC. A second factor (MFA) works with WebAuthn/FIDO2, for example a security key. Seeenterprise authentication for details.
Every organisation gets every feature. The price depends only on your size, as thepricing & plans overview shows.
ISMS consulting
Want help to build your ISMS? Our ISO 27001 consulting team works with you. We help from the gap analysis to the final audit.
ISO 27001 consultingCompare costs up front
The free TCO calculator compares costs over three years. It puts SecTepe.Core and two other models side by side. You see the total cost and the work it takes in house.
Open the TCO calculatorFAQ on ISO 27001 software
- What is ISO 27001 software?
- ISO 27001 software is also called an ISO 27001 tool, ISMS software or an ISMS tool. It puts your ISMS under ISO/IEC 27001 into one app. That covers scope, assets, risks, Annex A controls, policies, evidence and audits. Everyone works from one shared base, not from scattered spreadsheets and files.
- Does SecTepe.Core support ISO/IEC 27001:2022?
- Yes. The catalogue holds clauses 4 to 10 and all 93 Annex A controls of ISO/IEC 27001:2022. All of it comes in German and English. The Statement of Applicability, the audit programme and the assessment use the same entries.
- Will the software get me ISO 27001 certified?
- An accredited body grants the certificate after an independent audit. SecTepe.Core helps you prepare. You get a gap analysis, a roadmap, the Statement of Applicability, evidence and internal audits. It does not guarantee that you pass.
- How much does ISO 27001 software from SecTepe.Core cost?
- Every organisation gets the full feature set. The price depends only on the size of your organisation. There is no per-user pricing and no surcharge per standard. You will find the plans under Pricing & plans, and you can try SecTepe.Core free for 30 days.
- Can I implement ISO 27001 and NIS2 in the same ISMS tool?
- Yes. SecTepe.Core handles several frameworks at once. When rules overlap, you meet them once. They then count for ISO 27001, NIS2 and other standards.
- Where is my ISMS data stored?
- SecTepe.Core runs only in the EU. Each customer (tenant) is kept apart from the others. You can sign in once for all apps (single sign-on) with SAML 2.0 or OIDC.
Note: SecTepe.Core is built to help you meet ISO 27001. It does not guarantee a certificate. For that you need an independent audit by an accredited body.
Your ISO 27001 ISMS in one platform.
See SecTepe.Core in a demo, based on your own scope. We show you the Annex A controls, the risk assessment and the Statement of Applicability.
How we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.