ISO 27001 software for your ISMS: from scope to audit.
SecTepe.Core brings your ISO/IEC 27001:2022 ISMS into one platform. Scope, assets, risks, all 93 Annex A controls, the Statement of Applicability, policies and evidence live in one place. You prepare for certification in a structured way instead of maintaining spreadsheets.
What ISO 27001 software needs to do
ISO/IEC 27001:2022 requires a documented information security management system (ISMS). Clauses 4 to 10 cover context and scope, leadership, planning with risk assessment and risk treatment, support, operation, performance evaluation and improvement. On top of that comes a justified selection of the Annex A controls.
An ISMS tool should connect these requirements. Otherwise they end up spread across spreadsheets, drives and e-mails. In SecTepe.Core, the Statement of Applicability, the audit programme and the assessment all use the same catalogue. It holds clauses 4 to 10 and the Annex A controls, in German and English.
ISMS software: the core features for ISO 27001
Six building blocks that work closely together. TheISMS management page shows how they fit in daily work.
Scope and context
An assistant guides you through the ISMS scope. You document stakeholders and boundaries right alongside it.
Asset management
An inventory of your information assets, rated for confidentiality, integrity and availability.
Risk assessment
A risk matrix with adjustable scales and a risk register with audit trail. You track treatment plans until they are done.
Annex A controls
A library of the 93 ISO/IEC 27001:2022 controls with maturity rating. You collect and manage evidence per control.
Policy management
Templates for common security policies, version control and approval workflows.
Evaluation and improvement
Internal audit management, management review, nonconformities and corrective actions in one flow.
Statement of Applicability (SoA) from your current status
The Statement of Applicability (SoA) is one of the key documents of every ISO 27001 certification. SecTepe.Core generates it from your current compliance status. The platform keeps a history of its versions and exports the SoA as PDF, Excel or Word.
When a control changes, you simply regenerate the SoA. There is no document to update by hand.
Gap analysis and preparation for ISO 27001 certification
Adaptive questionnaires rate the maturity of your ISMS. The gap analysis shows open requirements and turns them into a roadmap of measures. Learn more undermulti-framework assessments.
You collect evidence directly on the controls. External auditors or consultants get a read-only view of your compliance status through the auditor portal.
Certification itself requires an independent audit by an accredited certification body. SecTepe.Core supports conformity but does not guarantee certification.
One ISMS tool for ISO 27001, NIS2 and other frameworks
You can manage NIS2, GDPR, BSI IT-Grundschutz, SOC 2 and other standards in the same platform. You fulfil overlapping requirements once and reuse them across frameworks. The cross-framework analysis shows your compliance position across all of them.
Implementing ISO 27001 also lays a foundation for NIS2. TheNIS2 software page shows how SecTepe.Core handles the NIS2 obligations. When a standard changes,framework change managementhelps you keep up.
EU hosting, single sign-on and a bilingual interface
SecTepe.Core is operated exclusively in the EU. The platform is multi-tenant and bilingual (German and English). It supports single sign-on via SAML 2.0 and OIDC as well as MFA with WebAuthn/FIDO2. Seeenterprise authentication for details.
Every organisation gets the full feature set. The price depends only on size, as thepricing & plans overview shows.
ISMS consulting
Don't want to build your ISMS alone? Our ISO 27001 consulting supports you from the gap analysis to the certification audit.
ISO 27001 consultingCompare costs up front
The free TCO calculator puts SecTepe.Core and two other models side by side over three years. It shows total cost and internal effort.
Open the TCO calculatorFAQ on ISO 27001 software
- What is ISO 27001 software?
- ISO 27001 software is also called ISMS software or an ISMS tool. It maps your information security management system to ISO/IEC 27001: scope, assets, risks, Annex A controls, policies, evidence and audits. It replaces scattered spreadsheets and documents with one shared basis for everyone involved.
- Does SecTepe.Core support ISO/IEC 27001:2022?
- Yes. The catalogue covers clauses 4 to 10 and all 93 Annex A controls of ISO/IEC 27001:2022, in German and English. The Statement of Applicability, the audit programme and the assessment use the same references.
- Will the software get me ISO 27001 certified?
- Certification is granted by an accredited certification body after an independent audit. SecTepe.Core supports your preparation with gap analysis, roadmap, Statement of Applicability, evidence and internal audit. It does not guarantee certification.
- How much does ISO 27001 software from SecTepe.Core cost?
- Every organisation gets the full feature set. The price depends only on the size of your organisation. There is no per-user pricing and no surcharge per standard. You will find the plans under Pricing & plans, and you can try SecTepe.Core free for 30 days.
- Can I implement ISO 27001 and NIS2 in the same ISMS tool?
- Yes. SecTepe.Core manages several frameworks at the same time. You fulfil overlapping requirements once and reuse them for ISO 27001, NIS2 and other standards.
- Where is my ISMS data stored?
- SecTepe.Core is operated exclusively in the EU. Tenants are isolated from each other. You can sign in via single sign-on with SAML 2.0 or OIDC.
Note: SecTepe.Core is designed to support ISO 27001 conformity. It does not guarantee certification. That requires an independent audit by an accredited certification body.
Your ISO 27001 ISMS in one platform.
See SecTepe.Core in a demo, with Annex A controls, risk assessment and the Statement of Applicability, based on your scope.
How we work with you
We see every project as a long-term partnership, not a one-off delivery. Our approach has four clear phases. So you always know what happens next, who is in charge of what and which results to expect.
1. Free initial conversation
We learn about your starting point, your goals and your constraints. In 30 to 45 minutes we check whether our offer fits your situation. We outline possible paths and answer your questions, with no obligation.
2. Structured assessment
We record the current state: technical, organizational and regulatory. You get a prioritized assessment that names strengths, gaps and areas for action. It is the basis for a reliable offer.
3. Delivery with a dedicated lead
An experienced lead guides you through the delivery. You get clear milestones, transparent planning of effort and cost, and a weekly status. All results are documented and belong to you.
4. Continuous operations & review
After the project, we stay with you in operations. This includes managed services, regular reviews and tracking of open actions. We also reach out when new threats, new rules or technology changes come up.