Njordium Cyber Group, a Swedish developer of cybersecurity and risk management software, has launched Inspect360 GRC, a platform built to give organisations an always-current picture of their governance, risk exposure and ability to prove compliance.

The new governance, risk and compliance tool sits alongside Inspect360 TPRM, the company’s existing third-party risk management product. Together, the two form a single Inspect360 platform that links internal oversight with external supplier dependencies, ending the practice of running them as separate programmes.

Njordium is responding to a growing problem of fragmentation. Many firms keep regulatory obligations, policies, risk registers, audit evidence and supplier reviews in different systems, spreadsheets and folders. Meanwhile, EU rules such as NIS2, DORA and GDPR now demand that cybersecurity risk, operational resilience and supplier dependencies be handled through a documented, auditable and continuous process with defined ownership.

According to Njordium, scattered tooling forces teams to spend heavily on upkeep without delivering the risk insight leadership needs or the audit trail regulators expect.

Inspect360 records frameworks, policies, risks, controls, evidence, exceptions and audits as one traceable dataset. Users can map a control and its supporting evidence once, then apply it across several regulatory standards.

Supplier and sub-supplier data connects directly to the wider risk environment, while inherent and residual risk, treatment plans, approvals and review cycles sit beside the relevant controls. The system also logs who held information, who took a decision, the reasoning behind it and its outcome.

The platform integrates with ServiceNow, Microsoft, Jira, SAP, GitLab, GitHub and other tools, and supports Google and Microsoft OAuth sign-in, including YubiKey and Google Titan hardware keys.

Source link