Solutions
Three tools, one cohesive system.
cage9 isn't three separate products bolted together. Risk management, ISMS operation, and ISO 27001 compliance share the same data model — so a risk and its mitigating control and its evidence cycle are all one click apart.
Risk Management
Identify and treat risks with inherent vs residual scoring, owner accountability, treatment decisions (mitigate / accept / transfer / avoid), and a complete change history.
- ▸5×5 likelihood × impact heatmap
- ▸Inherent vs residual tracking
- ▸Treatment workflow with target dates
- ▸Linked controls, services, and evidence
ISMS
Operate your information security management system from a single place. Owners, control statuses, evidence cadences, and event logs all live together.
- ▸Control catalog with implementation lifecycle
- ▸Service inventory with criticality and data classification
- ▸Per-control evidence cycles
- ▸Role-based access and audit trail
ISO 27001
All 93 Annex A controls included out of the box, with framework coverage metrics, applicability flags, and recurring evidence cycles tied to each control.
- ▸Full Annex A 2022 catalog
- ▸Framework coverage % per category
- ▸Applicability and Statement of Applicability support
- ▸Auditor-ready evidence trail