Docs

Security and compliance

Compliance and incidents

Track security frameworks control by control, collect evidence from the platform and report incidents on time.

Frameworks

datagab includes common security frameworks such as NIS2 and ISO 27001. Each framework is split into controls, and each control shows its status, owner and evidence. You can also create custom frameworks for your own policies.

In the consoleObservability › Compliance › Frameworks.

Evidence

Much of the evidence an auditor asks for already exists in datagab: connected log sources, retention, detection rules, cases, approvals and the audit trail. These are mapped to controls and kept up to date. You can add your own evidence too, and reminders tell you before evidence gets old.

Reports

Export reports on controls, evidence and incidents for your auditor or your board.

Incidents

Incidents carry a timeline, owners and tasks. For NIS2, datagab tracks the deadlines from the moment an incident starts: an early warning within 24 hours, an incident notification within 72 hours and a final report within one month, and drafts each report from the incident timeline.

Good to know
datagab helps you track and prove your work. Compliance itself also depends on your own processes and decisions.