Guides to Varmo
Explained step by step: from setup through assets, risks and requirements to the management review.
New to Varmo? Start here
In this order, you get to a working ISMS fastest.
Getting started
Setup, tasks and the dashboard – how to get going.
Organisation & roles
Members, functional roles, approvals, the four-eyes principle and segregation of duties.
Assets & protection requirements
Recording assets, defining the structure, assessing protection requirements, the baseline check, DPIA and suppliers.
Risks & measures
Methodology, assessing and treating risks, measures, exceptions and threats.
Requirements & SoA
Adopting catalogues, setting applicability, mappings, readiness and maturity level.
Policies & documents
Policies with an approval workflow, documents and evidence.
Governance, audits & incidents
Incidents, internal audits, management review, context, objectives, training and internal controls.
- Reporting and handling incidents
- Handling internal audits and findings
- Preparing and conducting the management review
- Recording context and interested parties
- Setting and measuring information security objectives
- Training, acknowledgement and competence
- Performing and evidencing internal controls
- Reading the change log and history
Account & administration
Sign-in, support, data export, plan and invoices, organisations and the administration log.
Integrations
Guides to setting up the integrations.
Not found what you are looking for?
When signed in, “Help & support” shows you the way to us: Tenant Admins submit a request directly in the app from the Starter plan, everyone else writes to info@varmo.ch. We reply within one working day (Monday to Friday). The glossary explains technical terms.