Ciqualia Complaica – Products, services and consulting around compliance

A typical compliance scope covers processes, infrastructure, data – partly the entire organization or individual roles.

• You see the entire scope in one place. Scope objects can be imported or created with AI assistance.
• All changes are fully traceable – who changed what and when. You are notified about relevant changes.
• Dependencies and compliance goals are presented transparently.

• For each compliance object, you see a clear overview of the requirements to be met, including their current status. Conversely, for each requirement, you see all objects in which it must be implemented.
• Complaica assigns the requirements automatically. If needed, these assignments can be adjusted manually. For each requirement, Complaica provides the exact standard text – no separate lookup in guidelines or books is required.
• Additionally, you see the associated controls and tasks that must be implemented to meet the requirements, as well as the responsible people in each case.

Status information is the heart of compliance and is continuously calculated and updated.

• You see the status of every object, every requirement, every risk and other compliance elements.
• Additionally, aggregated statuses are available, e.g., for all applications or for all documentation requirements.
• At the top level, you get an overall status for the entire organization or for individual standards.
• And not only the current state, but also the full history of all status changes.
• Of course, you are notified automatically about status changes – especially when a status deteriorates.

You see at a glance:

• the persons responsible for the status of specific processes, assets and organizational units,
• the respective risk owners and decision-makers,
• the responsibilities for the implementation of controls and tasks,
• as well as all open items and ongoing measures.

• Complaica assigns relevant threats automatically; if needed, you can correct them manually at any time.
• Threats can be assessed in terms of probability of occurrence, impact and category.
• The structure of the risk matrix is fully configurable.
• You can set your risk appetite (Risk Appetite).
• You can monitor the evolution of the overall risk picture over time and view the gross vs. net risk status.
• Of course, you can define risk treatment strategies, countermeasures, responsible people, deadlines and budgets.

• All data is displayed in the Complaica dashboards and/or exported to external systems for further analysis.
• All required standard reports are provided automatically, e.g.:
• IT-Grundschutz A.1 to A.6
• ISO 27001 Statement of Applicability
• GDPR Record of Processing Activities (RoPA) and Data Protection Impact Assessment (DPAI)

• Last but not least, you don’t have to memorize the entire data structure – simply enter any text and the system will instantly find everything relevant for you.
• The Compl-AI-ca AI services support you in defining the structure, in assigning tasks and risks, as well as in monitoring changes.
• The BI functions help you analyze data quickly and efficiently.