Skip to main content

Topic in the Kopexa blog

Practical guidance

Explore Practical guidance: background information, practical examples and recent developments from the Kopexa blog.

#Practical guidance11 articles

Latest on this topic

Best GRC software for corporate groups in 2026

Compare GRC software for corporate groups: test tenant separation, shared controls, local exceptions and consolidated reporting in practice.

· 3 min read

Read article

More on this topic

1–10 of 11

Guides & How-To

Best ISMS software for small and medium-sized businesses in 2026

Choose ISMS software for SMEs: assess Kopexa, Kertos, SECJUR and verinice against everyday work, using clear criteria and a shared test case.

Julian Köhn·
Guides & How-To

ISMS without an internal IT department: Allocate tasks sensibly

Organise information security with outsourced IT: clarify responsibilities, evidence and decisions without building your own IT department.

Julian Köhn·
Guides & How-To

Changing your risk method: How do assessments remain comparable?

Introduce new risk scales without creating apparent improvement: retain method versions, compare sample cases and separate time series clearly.

Julian Köhn·
Guides & How-To

DORA register of information: How do you check data quality?

Check relationships between contracts, providers and functions in the DORA register of information: review steps, typical errors and a supplier-change example.

Julian Köhn·
Guides & How-To

GRC for subsidiaries: Central direction, local responsibility

Shared security standards without blanket green group reports: separate central requirements, local implementation and justified exceptions.

Julian Köhn·
Guides & How-To

ISMS with an external consultant: Agree on collaboration and handover

Keep your ISMS operational after a consulting project with clear decisions, shared records and a handover tested in practice.

Julian Köhn·
Guides & How-To

Exporting ISMS data: How to test your future exit

Before buying software, check whether risks, measures, evidence and their relationships can leave with you. Includes a practical export test and acceptance record.

Julian Köhn·
Guides & How-To

Introducing GRC software: Who takes responsibility for what?

A role model for GRC implementation: distinguish decision-makers, business owners and administrators, then test the handover to daily operations.

Julian Köhn·
Guides & How-To

ISMS risk review: When do you need to reassess?

Identify changes, new information and ineffective safeguards, review your risk assessment and keep decisions traceable.

Julian Köhn·