Skip to content
Varmo
FEATURES · GUIDED SETUP & TASKS

Varmo guides you through the standard.

An assistant takes you step by step to a working ISMS. After that, everyone knows what to do next, and management sees on the dashboard where the ISMS stands.

WHAT YOU GET
  • Setup assistant with 22 steps, pause at any time
  • Tasks per person, with due date and direct link
  • “What happens next?” at the top of every workflow page
  • Dashboard with key figures for top management (ISO/IEC 27001 9.3)

Step by step to your ISMS

The setup assistant starts with your organisation and leads you through context, approvals, risk methodology and frameworks to your first assets and reviews. Each step explains what it is about and why; completed steps are ticked off automatically.

  • 22 steps, grouped by topic
  • Progress is saved
  • Only where it makes sense: mark a step as “not relevant”, with a reason
Setup assistant of a newly opened organisation: 0 of 22 steps completed, at the top the task “Step 1: Record your organisation” with an explanation, a “Do it now” button and the steps that follow.
At the start there is just one step: record your organisation. “Next steps” shows what follows.

Everyone knows what to do

Tasks arise from the workflows: an approval, a measure that is due, a review. Every person sees their tasks in one place, with a due date and a link to the page where they get done.

  • Tasks from all modules in one list
  • Notice when a step in a workflow has nobody assigned
  • Works on your phone too
“My tasks” of the head of IT: filter by module and tasks that are due, each with an explanation, due date and button.
Tasks that are due or overdue from every module, with a filter per module and a direct button.

“What happens next?”

At the top of every workflow page you see whether it is your turn, who else is up and which steps follow, with names instead of roles. That way no risk, policy or incident is left lying unnoticed.

  • Your turn: with a button for the next action
  • Waiting: who is responsible and when you are needed again
  • Completed: with the next due date
Notice “Implement your measure” on the risk “Ransomware attack”: 2 of 3 measures implemented, then the reviewer assesses the residual risk and the risk owner decides.
“Next steps”: who is up after you and when you will get your next task.

A dashboard for every role

The dashboard shows each role what is open: risks, measures, findings, incidents, objectives, internal controls, training, policy acknowledgements and the implementation level of your frameworks. Key figures are measured against targets and shown over time; everyone can tailor their own dashboard.

Varmo dashboard: greeting with the open items, open risks and measures against target values, and implementation per framework for ISO/IEC 27001, NIS2 and NIST CSF.
The dashboard shows what is open for each role, measures key figures against targets and can be customised.

Frequently asked questions

How long does the setup take?

That depends on your size and the groundwork you have already done. The assistant shows what comes next and saves your progress; you can stop at any time and pick up later. Existing documents that have already been approved can be adopted.

Do employees get tasks too?

Yes, whenever they are responsible for a step in a workflow, for example as the owner of an asset, as the person responsible for a measure or to acknowledge a policy.

How close are you to ISO/IEC 27001?

In a personal demo, we show you the way to the readiness report, with no obligation. Or try it free for 30 days with every feature.