- Central Knowledge Base
- Process-based Risk- and Compliance Management
- Permanent Compliance
- Raised Awareness
- Large Companies
- Cities and municipalities
- Auditors and Risk Managers
Information security standards, such as ISO 27001/27002 or the German Grundschutzhandbuch tend to state very abstract implementation suggestions for risk mitigation.
While approaches based on best practices, standards and experts can substantially support organizations in managing risks, they have a variety of shortcomings. In particular, because decision makers have to manually deal with often thousands of interdependencies and interactions. Making decisions in such an environment without computational support is not only tedious and expensive it is in fact highly error-prone.
AURUM provides decision makers with an intuitive and easy to use risk management solution. It encapsulates the complexity of the domain and provides only the information necessary to make infomed and efficient decisions.