CSBBasic checkFree
Cyber-Security Basic Check
Cyber-Security Basis Check Basis Pack
0 CHF/ year
free for good
- Assessment (included)
- Measures (not included)
- Risks (not included)
39 questions in 10 main areas
- Questionnaire & Score
- Results-PDF
- 1 User
Pricing
Price Model
One price per module and project, yearly or monthly. The Cyber-Security Basic Check is free.
All prices in CHF. Paying yearly, you pay for 10 months instead of 12.
Modules
Every module is a question catalogue of its own with its evaluation. The marks are the same as in the app and on the reports.
CSBBasic checkExtends the Basic Check
Measures for Cyber-Security Basic Check
Enable Measures-Board for Basis Check
850 CHF/ yearinstead of CHF 1'020 when paying monthly
equals CHF 71 per month
- Assessment (included)
- Measures (included)
- Risks (included)
39 questions in 10 main areas
- Define measures
- Validating the measures
- Tasks & Owner
- Deadlines & Status
- Export / Proofs
IKTMinimum standard
ICT - Minimal Standard
ICT Minimal Standard along NIST 1.4
1'550 CHF/ yearinstead of CHF 1'860 when paying monthly
equals CHF 129 per month
- Assessment (included)
- Measures (included)
- Risks (included)
108 questions in 5 main areas
- Target / actual value per question
- Current situation description
- Define measures
- Validate measures
- Various evaluations
- Gap analysis & Roadmap
- Evidence & Export
- Roles & Rights
- Risk assessment
- Risk evaluation
- +1 Users
ISO27001
ISO/IEC 27001
ISO/IEC 27001:2022 Questionnaire
1'650 CHF/ yearinstead of CHF 1'980 when paying monthly
equals CHF 138 per month
- Assessment (included)
- Measures (included)
- Risks (included)
125 questions in 10 main areas
- Target / actual value per question
- Current situation description
- Detailed question description
- Clear requirements per question
- Define measures
- Validate measures
- Various evaluations
- Downloads
- Gap analysis & Roadmap
- Evidence & Export
- Roles & Rights
- Risk assessment
- Risk evaluation
- +1 Users
NIS2EU directive
NIS2 - Network and Information Security
NIS2 Directive (EU 2022/2555) Compliance Module
1'650 CHF/ yearinstead of CHF 1'980 when paying monthly
equals CHF 138 per month
- Assessment (included)
- Measures (included)
- Risks (included)
95 questions in 10 main areas
- Target / actual value per question
- Current situation description
- Define measures
- Validate measures
- Various evaluations
- Gap analysis & Roadmap
- Evidence & Export
- Roles & Rights
- Risk assessment
- Risk evaluation
- +1 Users
CSF2.0
NIST CSF 2.0
NIST Cybersecurity Framework (CSF) 2.0
1'450 CHF/ yearinstead of CHF 1'740 when paying monthly
equals CHF 121 per month
- Assessment (included)
- Measures (included)
- Risks (not included)
106 questions in 6 main areas
- Target / actual value per question
- Current situation description
- Define measures
- Validate measures
- Various evaluations
- Gap analysis & Roadmap
- Evidence & Export
- Roles & Rights
- +1 Users
DSGData protection
Data Protection & Compliance Check
GDPR & revFADP Question Module
1'750 CHF/ yearinstead of CHF 2'100 when paying monthly
equals CHF 146 per month
- Assessment (included)
- Measures (included)
- Risks (not included)
107 questions in 10 main areas
- Scope selectable: EU, CH or EU+CH
- Target / actual value per question
- Current situation description
- Define measures
- Validate measures
- Various evaluations
- Gap analysis & Roadmap
- Evidence & Export
- Roles & Rights
- +1 Users
IKSInternal control
ICS - Internal Control System
ICS – Dynamic Question Module
1'450 CHF/ yearinstead of CHF 1'740 when paying monthly
equals CHF 121 per month
- Assessment (included)
- Measures (included)
- Risks (not included)
53 questions in 7 main areas
- Target / actual value per question
- Current situation description
- Various evaluations
- Gap analysis & Roadmap
- Evidence & Export
- Roles & Rights
- +1 Users
RISKRisk analysis
Risk module
Risk Catalog along BSI standards
1'150 CHF/ yearinstead of CHF 1'380 when paying monthly
equals CHF 96 per month
- Assessment (included)
- Measures (included)
- Risks (included)
53 questions in 6 main areas
- Capture Gross Risk
- Capture Net Risk
- Describe Risk Minimization
- Validate Measures
- Various Evaluations
- Roles & Rights
Included in every paid module
- Current state and target per question with a remark and a link to the evidence
- Results and executive report as PDF, answers as Word, data as Excel
- Comparison over the years duplicate an assessment for the new year
- History of every change who changed what and when
- Roles in the project owner, admin, write, read
- Operated in Zurich hosted in the AWS region Zurich
Additional users
Every module comes with one user. Packages add more people.
+1 Additional User
Full Access, Roles & Rights
+5 Additional Users
5-user bundle, Roles & Rights
Side-by-side
How does SCMC compare to other GRC tools?
Swiss data residency, native coverage of the Swiss ICT Minimum Standard and revFADP, native German UI, lower entry price: the key differences at a glance.
| Feature | SCMC | Vanta | Drata | ISMS consulting (CH) | Excel-ISMS |
|---|---|---|---|---|---|
| Data residency | 🇨🇭 Switzerland exclusive (AWS Zurich, eu-central-2) | US (default), EU-Frankfurt opt-in | US (AWS us-east) | Consultant tools (Word/Excel/SharePoint) on client side | on-premise |
| Swiss ICT Minimum Standard | ✅ Native, structured by NIST functions | ❌ not native (manual NIST mapping) | ❌ not native (manual NIST mapping) | ✅ methodically via consultant | manual |
| revFADP (Swiss data protection) | ✅ Combined with GDPR, 107 controls, 3 scope templates | GDPR module only | GDPR module only | ✅ methodically via consultant | manual |
| Platform language | German + English (native) | English only | English only | German + English | any |
| Entry price (public) | From CHF 115/month | From USD ~10,000/year (Core plan) | From USD ~7,500/year (Foundation, ≤50 employees) | Typ. CHF 8,000–25,000 per engagement (day rate) | 0 (self-built) |
| Free tier to try out | ✅ Basic Cyber-Security Check (10 areas, 39 controls) | ❌ free demo only | ❌ free demo only | ❌ no self-service (paid initial scoping) | — |
| ISO/IEC 27001:2022 | ✅ all 93 Annex A controls | ✅ | ✅ | ✅ (consulting engagement) | manual |
| NIST CSF 2.0 (with Govern) | ✅ all 6 functions | ✅ (CSF 1.1 + 2.0) | ✅ (CSF 1.1 + 2.0) | ✅ (consulting engagement) | manual |
| EU AI Act / ISO 42001 | ✅ 102 controls, 10 domains | ✅ (dedicated module) | ✅ (dedicated module) | depends on consultant specialisation | ❌ |
| Audit-ready export | ✅ Maturity, gap analysis, evidence | ✅ | ✅ | document-based (Word/PDF/Excel) | manual |
| Versioned assessment cycles | ✅ Traceable history | ✅ | ✅ | manual / depends on engagement | ❌ |
As of April 2026. Competitor data is based on publicly available sources (vendor websites, pricing pages from Vendr/G2/Capterra, help centers) and may change. Pricing in particular is not always public. Verify current pricing and feature lists directly with the vendors. SCMC makes no claim of completeness or legally binding statements about competitors.