CATEYE GRC
Get ready for SOC 2, ISO 27001, HIPAA, PCI DSS or NIST CSF, and stay ready: controls, evidence, policies, risks, vendors and audits in one place, with a virtual CISO from our team if you need one.
Request a demo See what’s included
One of our cybersecurity services, hosted by CATEYE. Pricing on request.
Compliance work, organised
The frameworks your customers and auditors ask for, with the controls and evidence behind them.
Frameworks
SOC 2, ISO 27001, HIPAA, NIST CSF 2.0 and PCI DSS with SAQ scoping, plus your own customers’ requirements, mapped to one set of controls.
Controls and evidence
Each control has an owner, a status and the evidence that proves it, so the next audit starts from what is already there.
Policies
Policy templates to start from, with reviews and approvals, and a record of who has read and accepted them.
Risks
A risk register with a risk library and simple FAIR-style scoring, which can take in findings from penetration tests.
Vendors and questionnaires
Supplier reviews and security questionnaires, sent, answered and scored in the platform.
Audits and reporting
An audit workspace for auditor requests, comments and samples, alerts in Slack or Teams, a weekly digest and a monthly status report.
Run by us, or by your team
Managed by CATEYE
Our security team runs the service for you and reports to you, so you get the outcome without hiring for it.
Or used by your team
Your own IT or security staff sign in to the same workspace, with roles that decide who sees and changes what.
Hosted and kept apart
We host and update the platform. Each client has its own workspace, kept apart from every other client’s data.
How it works
From a first conversation to a service running for your company.
Request a demo
Tell us about your company and what you need. We show you the service with sample data.
Agree the scope
We agree what is covered, the systems involved and who does what, in writing.
Set up your workspace
We create your workspace, invite your people and connect the systems in scope.
Work and report
The service runs, findings and progress are tracked in the platform, and you get regular reports.
Questions about CATEYE GRC
Can you act as our CISO?
Yes. A virtual CISO from our team can own the programme, run it in CATEYE GRC and report to your management. See also CISO on demand.
Do you issue the SOC 2 report or ISO certificate?
No. An independent auditor or certification body does that. We get you ready, manage the evidence and work with your auditor through the audit workspace.
We already use another compliance tool. Can we move?
Yes. We plan the move with you so your controls, evidence and policies come across before you switch.
Can several frameworks share the same work?
Yes. Controls are mapped across frameworks, so evidence collected once counts towards SOC 2, ISO 27001 and the others where they overlap.
Who in our company uses it?
Your control owners upload evidence and approve policies, management sees the status, and auditors get their own limited access.
Get audit-ready with CATEYE GRC
We will show you a framework workspace with sample controls, evidence and reports.