Who it is for
Built for the people who answer to the auditor.
Basenorm is for the people who carry information security and AI governance in European organisations. Each role sees the same controls, evidence and owners, from its own angle.
Hosted in the Netherlands. Your data stays in the EU.In brief
- CISO
- Overview and decisionsRisk, scope and priorities
- Security officer
- Controls and evidenceCurrent, owned and linked
- IT manager
- Technical measuresOnce, for every standard
- Compliance lead
- Frameworks and auditsOne library, several standards
01 / By role
What changes
for you.
The questions each role asks, and how Basenorm answers them.
- CISOWhere do we stand, and what does AI add?
See per standard which controls are in place, which risks are open and which owners are behind. Decide on scope and priorities for ISO 42001 based on what you already run for ISO 27001.
- Security officerIs the evidence current, and who owns it?
Every control has an owner and linked evidence. You see what is overdue before the auditor does, and you maintain shared controls once.
- IT managerWhy do I deliver the same thing three times?
Access control, logging and backups count for several standards. You deliver the evidence once, linked to the control, and it is reused where the control counts.
- Compliance leadHow do I add the next framework?
Add ISO 42001, NIS2 or DORA on the same library. Basenorm shows which controls already count and what is missing. You decide with your auditor what is adequate.
02 / By situation
Organisations that work with Basenorm.
ISO 27001 in place, ISO 42001 next
Organisations that use or build AI and want to extend their ISMS with an AI management system.
02A first ISMS
Organisations that need ISO 27001 for customers and want structure from day one.
03Regulated sectors
Organisations in scope of NIS2, DORA or the AI Act, next to ISO 27001.
03 / Questions
Questions about
working with Basenorm.
Do we need a dedicated compliance team?
No. Many organisations start with one security officer or IT manager, with owners in the business for each control.
Does AskNorman take decisions for us?
No. AskNorman explains requirements, drafts documents and searches your controls and evidence. Your team assesses and decides.
Can our auditor work in Basenorm?
Yes. With the auditor role your auditor has read access to controls and evidence.
Book a demo
See Basenorm from your role.
In a demo we look at your role, your frameworks and your next step.
- What you see as CISO, security officer or IT manager.
- How owners and evidence are linked to controls.
- How you add ISO 42001 to ISO 27001.
Hosted in the Netherlands. Your data stays in the EU.