Registers, reviews and evidence, kept in one workspace.
Each standard gets its own workspace. Your organisation keeps one set of records underneath. This is what is inside.
Four standards, one set of registers.
ISO/IEC 27001:2022
Indonesia · Australia
Run the ISMS the way the standard is written.
ISO/IEC 27701:2025
Indonesia
Privacy management on the same footing as security.
SOC 2 Type II
Indonesia · Australia
A Type II engagement, from scope to bridge letter.
Essential Eight
Australia
Essential Eight maturity, strategy by strategy.
What a workspace holds
Every page is a register or a review the standard asks for, named the way auditors name it. A risk is added once, owned by a person, rated, treated and signed off, and the same record shows up wherever another framework needs it.
Workflows that leave a record
- Approvals and sign-off
- Risk owners sign off the treatment and the residual risk. Risk criteria are approved before the assessment uses them.
- Reminders before things lapse
- Anything due within 30 days or overdue, from treatment dates to breach clocks and patch windows, appears as an in-app notification and in a daily email digest to the workspace's Owners and Editors.
- Findings become corrective actions
- An audit finding is recorded as a Major or Minor Nonconformity and becomes a corrective action with an owner, a due date and the evidence that closed it.
- Exports for the auditor
- Registers export to CSV, Excel and PDF, from the same data the dashboards read.
For people outside your team
- Trust Center
- A public page you publish from the workspace: certifications, control summaries, subprocessors, answers to common questions, and documents released on request.
- Vendor portal
- Suppliers answer their assessment through a private, expiring link. No account, and the answers land on the supplier register.
- Training and awareness
- Participants read the material, take the quiz in English or Indonesian, and receive a completion certificate.
Four access levels
The Owner is the person who set up the workspace and hands out the other three. Each member opens only the dashboards the workspace subscribes to and they have been given, enforced on the server.
| Owner | Sets up the workspace, invites members and decides which dashboards each person can open. |
|---|---|
| Editor | Adds, edits, approves and archives records in every dashboard they can open. |
| Auditor | Reads everything in full and exports evidence. Records audit work, findings and corrective actions; changes nothing else. |
| Viewer | Reads only. Emails, phone numbers and data subject names are masked, and nothing can be changed or exported. |
Your consultants work on your records
Whitesec consultants see the workspaces they support from one portfolio, so the people helping you prepare work on the records you keep, not on copies sent by email.
See your own registers in Whitesec One.
We walk through the workspaces for the frameworks you need, with the team in Jakarta or Perth.