By role · Security Manager
Nothing falls through the cracks.
Own the operational day: the vulnerability queue, incidents from triage to lessons learned, access certifications, hardening sign-offs and phishing rounds. Each carries an owner, a date and a record behind it.
What this replaces
- Ownership lives in a chat thread that scrolls away by Friday.
- Entitlement reviews go out once a year, as a spreadsheet emailed to twelve managers.
- The scanner reports the same finding every month and the argument restarts every month.
What you do here
- 1Take a vulnerability from triage to closed.The queue is yours to re-prioritise; the patch work leaves it as a work item with an owner.Vulnerability management
- 2Assign an incident and hold it to closure.Owner, severity and due date sit on the incident; the lessons-learned write-up is what closes it out.Incident journal
- 3Run an access certification campaign.Scope the systems, bulk-decide entitlements, then let the anomaly scan flag the outliers before you sign off.Access reviews
- 4Sign off the hardening exceptions your teams raise.Baseline scans and findings roll up per system; the written rationale is the artefact, on a tenant licensed for the add-on.Hardening systems
- 5Commission a phishing round for your teams.Five steps to launch, then the funnel from sent to compromised, read per person.Security awareness
- 6Mint the auditor evidence export.Chain integrity and an as-of view sit beside the export: an add-on that rides on the hardening licence.Evidence Lake
What changes
- One certification campaign closes with bulk decisions and an anomaly scan behind every approval.
- A phishing round scores six states per person, from sent to compromised.
- Chain integrity and an as-of view ship with the evidence export, dated.
Incident journalLessons learnedVulnerability queueAccess reviewsHardening add-onAwareness campaignsEvidence Lake add-on
Where the role stops
You run operations; the tenant is not yours. Roles and permissions sit with the CISO, while an incident is yours to close but never to delete.
Works with
- SOC ManagerContinuity is the SOC's hardest problem; it dies at seven in the morning. Rota, escalation, workload and a signed handover keep it alive. Cases and incident records are yours to close — or to delete.SOC
- IT ManagerAn inventory is accurate on the day it was exported. Here the register stays live, exceptions are written decisions and each system is scanned against its baseline with the hardening add-on.ASSETS
- Security Awareness ManagerTraining that only reaches people with a login is not a programme. Modules are yours to author, enrolment goes by department and phishing runs on a recurring schedule, read per recipient rather than as one company rate.AWARENESS
Ready to move
beyond legacy GRC?
14-day free trial. No credit card. Cloud or on-premises.