Audit-proof
Complete traceability of your answers and results — audit-ready.
Cyber and information security made simple
SCMC stands for Swiss quality in information security. Our ISMS platform combines simplicity, efficiency, and maximum security – replacing scattered Excel sheets with one central, online solution. All data is stored exclusively in a cloud environment operated in Switzerland – for maximum data security and full control.
With flexible assessment tools – from a quick Basic Cybersecurity Check to NIST-based standards and ISO/IEC 27001:2022 – companies of all sizes get the right solution to analyse, assess, and continuously improve their overall security level. No more Excel – manage information security easily online.
ISG reporting obligation in force since April 2025 — are you prepared?
01 — Assessments
Answer targeted questions.Uncover real gaps.
Each assessment follows a structured question catalog aligned to your chosen framework — CSB Basic Check, IKT Minimalstandard, or ISO 27001:2022. Questions are grouped by domain and designed for non-experts to complete without external consultants. Invite your team, split domains by role, and track completion live. Every answer is versioned and audit-ready from day one.
- Frameworks: CSB, IKT / NIST2, ISO 27001:2022
- Multi-user with role-based access control
- 100% online — no Excel, no consultants required
Basic Cyber-Security Check: Simple, fast, and clear
1 / 6
02 — Results
Visual reports yourmanagement will understand.
Results are displayed as radar charts, scoring overviews, and domain-level breakdowns — clear enough for a board presentation, detailed enough for a technical review. Compare assessments over time to show measurable progress and justify security investments. Export audit-ready reports in seconds.
- Radar / spider chart per framework domain
- Side-by-side comparison across assessments
- Audit-ready export — PDF and structured data
Basic Cyber-Security Check: Spider diagram evaluation
1 / 7
03 — Measures
Turn findings intoan actionable plan.
Every gap identified during the assessment automatically generates a set of recommended measures mapped to the relevant framework control. Review, adjust, and prioritize them in the platform — then assign owners and deadlines. Status updates in real time across the entire team, keeping everyone aligned without manual coordination.
- Pre-mapped measures per framework domain
- Owner assignment with deadline and status tracking
- Linked to assessment findings — full traceability
Basic Cyber-Security Check: Measures tailored to your company
1 / 4
04 — Risks
Know what matters.Before it becomes a problem.
Assessment findings are automatically mapped to a risk register. Each risk is scored by likelihood and impact so your team focuses on what matters most. Link risks to planned measures, track residual exposure after remediation, and maintain a live picture of your security posture — always current, never stale.
- Automated risk register from assessment findings
- Likelihood × impact scoring matrix
- Residual risk tracking after measure completion
Basic Cyber-Security Check: Risk assessment
1 / 6
How it works
Simple, fast, transparent — three steps to a security assessment.
01
Select assessment
ISMS, ICT minimum standard, or individual framework.
02
Invite team
Assign roles, assign sub-areas, see progress live.
03
Implement results
Gap analysis, roadmap, management summary & audit export.
Compliance Made Simple. Security Made Strong. Confidence Made Possible.