Project Description

We would like to implement a GRC tool that can help different teams with their daily tasks (risk management, internal/external audit findings, ISMS/PIMS Policies updates, reporting etc.).

We are starting this project to make everyone's job more efficient. Currently many teams in SUSE are using spreadsheets that are not so easy to manage, require manual effort to update them and are error-prone. Having one tool that can manage different tasks can make everyone's work more effective.

Goal for this Hackweek

• Identify if there is any open source GRC platform that can help us saving some time from the development.

• Implement a GRC tool that we can use internally instead of purchasing a tool from another company that is expensive.

• Try to customise in the current platform what we can as per SUSE's workflows related to Risk Management process, ISMS/PIMS internal and external audit finding reports, ISMS/PIMS Policies etc.