Audit-proof
Complete traceability of your answers and results — audit-ready.
New Self-learning module for management, with HWZ
Cyber and information security made simple
SCMC stands for Swiss quality in information security. Our ISMS platform combines simplicity, efficiency, and maximum security – replacing scattered Excel sheets with one central, online solution. All data is stored exclusively in a cloud environment operated in Switzerland – for maximum data security and full control.
With flexible assessment tools – from a quick Basic Cybersecurity Check to NIST-based standards and ISO/IEC 27001:2022 – companies of all sizes get the right solution to analyse, assess, and continuously improve their overall security level. No more Excel – manage information security easily online.
ISG reporting obligation in force since April 2025 — are you prepared?
New Self-learning module with HWZ
Cyber risks: leadership required
An ordinary Tuesday morning, and suddenly every system in your company stops. Do you know, as management, what to do now?
In about 50 minutes the self-learning module shows why information security is a leadership task, which questions you should ask and how to protect your company's most important assets. You learn to make the maturity of your information security visible and manageable, hands-on and without technical jargon. It was created with Heinz Stieger and the HWZ University of Applied Sciences in Business Administration Zurich for the CAS General Management. The module is in German.
- About 50 minutes
- Open, no sign-in
- No technical jargon
- With a closing quiz
The module is in German, runs on the Articulate learning platform and opens in a new window.
Self-learning module50 minutes
«SCMC Cyber-Risiken: Führung gefordert»
- 1Recognising cyber risks as a management challenge
- 2Identifying the crown jewels and assessing protection needs
- 3Steering information security: ICT minimum standard and self-assessment
- 4Quiz and documents to download
Developed with
01 · Assessments
Answer targeted questions.Uncover real gaps.
Every assessment follows the question catalogue of a module, such as the Swiss ICT minimum standard, ISO 27001, NIS2 or data protection. For each question you record the current state and the target, with a remark and a link to the evidence. The team works together in the project, every change stays in the history of the question, and for the next year you duplicate the assessment and carry on from there.
- Modules for Swiss and EU requirements, from the Basic Check to ISO 27001
- Roles in the project: owner, admin, writer, reader
- History of every answer, import and export as Excel
- You choose how answers look in your profile
Assessment list: questions, measures and risks at a glance
1 / 5
02 · Results
Visual reports yourmanagement will understand.
The results show current state and target per main area and area, as a radar chart and as a table with the gap in percentage points. Two years side by side show what has moved. For the management there is the report with a one-page summary as PDF or Word, and the executive report brings assessment, measures and risks together in one document.
- Radar chart and table per area
- Comparison across several years
- Report and executive report as PDF and Word
Results per main area as a radar chart
1 / 4
03 · Measures
Turn findings intoan actionable plan.
Every question below its target appears among the measures, with the recommendation of the module where it has one. You record what will be implemented, who is responsible, by when, and who checks the result. Overdue deadlines are marked, reminders go out by mail, and under "My Tasks" everyone sees what is on their desk.
- Responsible person, deadline and validation per measure
- Reminders by mail and "My Tasks"
- Plan of measures as Word and Excel
A measure with current state, target, deadline and responsible person
1 / 4
04 · Risks
Know what matters.Before it becomes a problem.
Where an answer is below its target, you rate the risk by probability and impact, right in the matrix. The residual risk after the measures follows, with its reasoning and evidence. The risk results show on one page how many positions are high, how the measures move them down the levels, and where no residual risk has been rated yet.
- Risk and residual risk in one matrix
- Risk results on one page
- Risk analysis as Word
Risk and residual risk in one matrix
1 / 4
How it works
Simple, fast, transparent — three steps to a security assessment.
01
Select assessment
ISMS, ICT minimum standard, or individual framework.
02
Invite team
Assign roles, assign sub-areas, see progress live.
03
Implement results
Gap analysis, roadmap, management summary & audit export.
Compliance Made Simple. Security Made Strong. Confidence Made Possible.
Built Around Leading Security Standards
Align with globally recognized cybersecurity and compliance frameworks.
