Compliance evolved.

GMARC is a scalable web based application that helps organisations automate, streamline and centralise their governance. We make ascertaining and managing risk, assurance, security and non-compliance simpler.

Enquire today

Enquire today

Built by professionals, for professionals.

GMARC is an Australian product designed by industry professionals and underpinned by risk management principles. Based on years of experience dealing with inefficient Security, Governance, Risk and Compliance sectors, GMARC was developed to provide the tools we wished we’d had.

GMARC has now evolved into a full-service suite that targets an organisation’s critical GRC needs, allowing them to manage operations, visualise needs and achieve objectives in a simple, cohesive and repeatable process.

View Features

Enquire today

Fact backed.

To provide effective insight to the executive, GMARC focuses on assets and control libraries. Assets represent investment. Controls protect the investment.

This simple blueprint allows GMARC to seamlessly manage compliance status against any predefined control library, apply those controls to the assets, and measure the effectiveness of those controls in managing the risk posed to the assets. The end result is an unparalleled ability to target budget expenditure where it’s actually required, based on empirical evidence and in real time.

View Features

Modular. Manageable. Effective.

GMARC provides web-based applications comprising a suite of modules.

While greatest efficiency and effectiveness is achieved through the integration of the full suite, we know that GRC can’t be a one size fits all approach. That’s why GMARC is designed to be fully customisable to your specific organisational needs and risk parameters.

View features

Risk

Automate and centralise risk assessment workflows with a customisable library of assets, threats, threat sources and controls.

Generate Security Risk Management Plans (SRMP);
Manage, maintain, and centralise SRMPs to meet the organisation’s security requirements;
Streamline and standardise the SRMP processes for the organisation within the environment’s Risk Management Framework.

GMARC Risk is aligned with 31000:2009 Risk Management – Principles and Guidelines and 27005 Guidelines for Information Security Risk Management.

Benefits

Centralise risk management information

Improve efficiency and avoid knowledge-silos by centralising information and allowing staff members across the organisation to benefit.
Cut SRMP development costs by reducing duplication of existing knowledge.

Link risk using Government Standards

Leverage GMARC’s Australian Government compliance libraries for more accurate control reporting.

Streamline Risk Reporting

An efficient and automated reporting function allowing different levels of detail based on the audience needs.
Export information for executives, project managers, technical staff or auditors.

read less

System Security Plan – SSP

Link an SSP to an existing Statement of Applicability (SoA);
Define the scope and introduction parameters;
Generate an instant SSP detailing all the implemented controls against the assets within the defined scope;
Instant retroactive SSP updates with linked SoA changes.

The cost savings achieved through the SSP module significantly reduces the overhead associated with generating and updating SSPs one or more times per annum, across one or more systems and environments.

This allows the organisation to redeploy scarce resources onto other areas where they can be better utilised.

read less

Compliance

Gain efficiencies and reduce overheads with automated reporting, while improving the ease and value of knowledge sharing business-wide.

Generate security compliance assessments and Statements of Applicability (SOA) for multiple standards (including ASD’s ISM);
Streamline and standardise the compliance and accreditation process within the client’s framework;
Track and report on compliance deviations along with compensating (alternative) controls;
Web-based view for easy authority monitoring.

Reporting

Compliance Summary

A customizable a high level view of compliance to use for executive reporting.

Risk of Non-compliance

Provides details of risk levels associated with any areas of non-compliance.

PSPF Reporting

Provides ISM compliance, which can be used to satisfy PSPF reporting requirements. Includes a summary of compliance, deviations, compensating controls and recommendations for each system.

Statement of Applicability

The version of the standard used for determining a system’s controls;
Control requirements that are, and are not, applicable to the system;
How controls are implemented and evidence of implementation;
Controls that are applicable but are not being complied with; and
Compliance rating per control item.

Compliance Recommendations

A list of recommendations that are applicable to the system.

read less

Enquire today

Like what you see? Get GMARC today.

GMARC offers a best practice approach to GRC in a fully flexible manner. If you’re ready to discover better, simpler management, talk to us about a strategic partnership today.

view features

Compliance evolved.

Built by professionals, for professionals.

Fact backed.

Why GMARC?

Modular. Manageable. Effective.

Risk

Benefits

System Security Plan – SSP

Compliance

Reporting

Like what you see? Get GMARC today.

Manage business better. Contact us today.

Manage business better.
Contact us today.