Pick a framework and start working: the library brings the requirements, the crosswalks to other standards and a first tailoring proposal. No transcribing standards into spreadsheets.
The library does the transcription, the crosswalk and the first pass.
01
Add ISO 27001, NIS2, C5, DORA, SOC 2, TISAX or NIST from the library with every requirement in place, in German and English.
Secani curates bilingual company catalogs for 18 standards; each release is pinned with a SHA-256 of its source.
02
See which ISO control answers which C5 or NIS2 requirement without building the mapping table yourself.
Mappings use OSCAL relationships (equivalent, subset, superset, intersects); the library holds over 80,000 current assertions.
03
Describe your company once; Secani proposes for each requirement whether it applies and why. You confirm instead of starting from an empty column.
Each decision is applicable, not applicable, conditional or unknown, with a reason, and can require approval before it counts.
The work between reading a standard and using it.
Transcribing a standard into a spreadsheet
Every requirement loaded, in German and English
Building a crosswalk between ISO, C5 and NIS2
OSCAL mappings between frameworks, ready to use
Writing an applicability reason for every requirement
A proposed decision with its reason, for you to confirm
Converting the 2023 Compendium for Grundschutz++
Edition 2023 and Grundschutz++ both supported, with a checked import
How many requirements does your team set up by hand when a framework is added?
Hours per year spent on setup
40
Your numbers, multiplied: requirements × minutes. Nothing of ours goes into the result.
Every catalog says where it came from and how far it was reviewed.
A workspace stays on the catalog version it started with. A newer release never moves an existing binding, replaces text or adopts revised mappings silently.
Catalogs are pinned with a SHA-256 of their source. Grundschutz++ is fetched from a pinned BSI commit and imported only if the checksum matches.
Each asset carries a review status, and our DE/EN company catalogs say plainly that they are editorial working catalogs, not official translations.
The library holds more than 260 catalogs and 77 mapping collections. Secani curates bilingual catalogs for ISO 27001, 27002, 42001, 9001 and 22301, BSI C5, NIST CSF, 800-53, 800-171 and AI RMF, SOC 2, DORA, CRA, the EU AI Act, CIS Controls, PCI DSS, GDPR and TISAX, plus NIS2 Deutschland.
Yes, both the IT-Grundschutz Compendium 2023 and Grundschutz++. The Compendium is converted to OSCAL; Grundschutz++ is imported from a pinned BSI release after a checksum check.
Yes. Upload your catalog as OSCAL JSON and it is added to the workspace like any library framework.
No. Our German and English company catalogs are editorial working catalogs with sources. They are not official translations and not evidence of conformity.
Load a framework and see your first gaps today.