Frequently asked questions about 365Robust

Legal and other requirements can create both risks and opportunities because organizations must adapt their operations to comply with applicable requirements.

• Risks: If an organization fails to identify or comply with laws, regulatory requirements, customer requirements or contractual obligations, it may face fines, legal consequences, increased costs, operational disruptions or reputational damage.
• Opportunities: By systematically managing requirements, an organization can improve its processes, reduce costs and incidents, strengthen its reputation and gain competitive advantages. New requirements can also drive innovation and more efficient ways of working.

Example: A new environmental requirement to reduce emissions poses a risk if a company fails to comply. At the same time, it can create an opportunity to invest in energy-efficient technology that both reduces emissions and lowers energy costs.

Optimal

For larger organizations seeking optimal compliance, risk control and sound risk management economics. By staying one step ahead and making full use of the 365Robust service, systematic processes and continuous refinement create competitive advantages, high quality and greater predictability. Maximum peace of mind for management.

Large

For proactive, medium-sized organizations looking to reduce risks, strengthen control, improve predictability and minimize the likelihood of costly disruptions, while avoiding regulatory penalties and reputational damage.

Basic

Recommended for organizations looking to establish a systematic approach to security management. The aim is to achieve a reasonable level of security, legal compliance and responsible operations through a well-balanced investment of time and resources.

Minimal

For organizations wishing to start small, focusing on a single compliance area, basic risk assessments and one user. This package provides a simple way to begin systematic security management with minimal effort and limited resources.

Startup

For newly established businesses without employees that want to achieve a basic, legally compliant and responsible level of security and regulatory compliance with minimal effort.

Strategic compliance assessment

A limited number of questions aimed at senior management, providing a valuable introduction and a foundation for strategic decision-making. Regardless of which compliance areas you select, this module includes the most important questions from all compliance areas and the Best practices module.

Eight compliance areas – sixteen processes

The complete compliance assessment is divided into eight compliance areas, covering a total of sixteen processes. These processes can be selected individually and include:

Work environment/Health – Cybersecurity – Economy/Finance – Property/Facilities – Sustainability/Environment – Purchasing/Procurement – IT security – Legal/Privacy – Information security – Quality/Internal control – Management/Governance – Marketing/Sales – Human resources/Competence – Production/Operations – Security/Emergency preparedness – Development/Projects.

Best practices

Best practices is an essential add-on module recommended for organizations committed to long-term improvement. It covers additional requirements and important considerations beyond legal, regulatory and industry-specific requirements.

Examples include governing documents, roles and responsibilities, organizational structures, crisis management and business continuity planning, insurance coverage, training, management reviews, performance monitoring and measurement.

Additional modules

We continuously develop new add-on modules in close collaboration with our customers to meet evolving needs and requirements.

Examples include Best practices, Security protection management systems (LSS), ISO 27001 and Systematic fire safety management.

SWOT analysis

A SWOT analysis is a strategic tool used to systematically identify and assess an organization's strengths, weaknesses, opportunities and threats as a basis for decision-making and prioritization. It is an excellent starting point for organizations that have not previously conducted a risk assessment. The results of the SWOT analysis can then be used to develop a risk management plan.

Simplified risk assessment (FRA)

A straightforward risk assessment that an organization's management should be able to carry out without specialized knowledge. Among other things, it helps determine whether an identified risk scenario is classified as unacceptable, acceptable or uncertain. The assessment leads to a two-step risk management plan: proposed risk mitigation measures and decisions on their implementation.

Consequence and likelihood analysis (KSA)

A consequence and likelihood analysis is a structured method for assessing risks by evaluating the potential severity of an unwanted event and the likelihood of its occurrence.

By combining consequence and likelihood, a risk level is calculated, providing a basis for prioritizing risk mitigation measures, as in the simplified risk assessment.

The analysis also supports threat assessments and considers critical assets, as well as strategic and operational objectives.

Annual calendar

The annual calendar is a simple planning tool that provides a clear overview of important security activities that need to be carried out throughout the year. These activities are also displayed in the management dashboard, showing planned, overdue and upcoming activities.

Risk economics

The risk economics module is designed for larger organizations that want to measure and monitor incident-related costs, insurance expenses, preventive security measures and security administration costs. The module enables organizations to track and analyze their annual risk-related costs, for example in relation to annual revenue.

Users

Additional users can always be added to actively work with 365Robust. Our packages include the minimum number of users required to keep initial costs as low as possible. Each additional user costs SEK 210 per month.

Worksites

Every organization has one mandatory worksite, called "Entire organization", which cannot be removed. Organizations operating at multiple geographical locations, or those wishing to structure their operations according to their own needs, can add additional worksites at any time. Each additional worksite costs SEK 210 per month.