Skip to content
Compliflux

Group ISMS

One ISMS for the entire group.

Groups do not run a dozen separate management systems. They maintain one framework centrally and give each unit the room it needs - without losing the mandate.

GroupSubsidiary DESubsidiary ATSubsidiary FRPolicyPolicyPolicy
01

Maintain centrally

Group policies, control set and requirements are created once at group level - versioned and approved.

02

Roll out in a controlled way

Requirements are distributed to selected subsidiaries. Each unit sees what is binding and what it shapes itself.

03

Add locally

The subsidiary adds country- or area-specific rules without overriding or diluting the group mandate.

04

Prove in consolidation

Maturity levels and evidence come together in a group view. Group audit sees the status of every unit in one place.

Org chart

A structure the platform knows.

The org chart maps the group - parent company, subsidiaries and units. Responsibilities, roll-outs and consolidated analyses follow this structure instead of rebuilding it in spreadsheets.

Units with their leads

Divisions, departments and teams, each with the person accountable for it - so a control has an owner rather than a mailbox.

Policies pinned to a unit

A unit sees the policies that apply to it, and its acknowledgments are counted against exactly that list.

Sites as a second dimension

Head office, data centre or plant, so a register can be read per location as well as per company.

Analyses follow the structure

Maturity, review health and open obligations roll up along the chart instead of being reassembled for every report.

Why centralise

One framework, many units - without friction loss.

The mandate stays binding

Central policies remain traceably in force, even when units add to them.

Local responsibility remains

Each subsidiary maintains its own part and sees its own maturity level.

Consolidated maturity levels

The group view aggregates across all units - for audit and the board.

One audit, many sites

Evidence exists per unit and is available, consolidated, at group level.