Management platform

SORT Redmine: your management system stops living in folders

The low-cost software solution that supports and sustains the implementation of any Management System. Available on premises or in the SORT cloud.

Request a demo

viewsGanttdashboardson premises or SORT cloudmulti-standardtraceability

What problem it solves

The problem is rarely designing the management system: it is sustaining it. Between one audit and the next, documentation scatters across shared drives, corrective actions end up in minutes nobody revisits, and periodic tasks —access reviews, backups, indicators— are agreed once and forgotten until the month before the audit, when a year of evidence has to be reconstructed in three weeks. SORT Redmine exists so that does not happen: every obligation of the system is a task with an owner, a date and a trail.


Who it is for

  • Organisations that are already certified and need to sustain the system without depending on one person.
  • Organisations mid-implementation, that want evidence to accumulate from day one.
  • Teams running more than one standard at a time —27001 and 20000, or 37001 and 37301— that do not want duplicated structures.

Capabilities

01

Controlled documentation

Policies, procedures and records with versioning, approval and validity dates. Every document knows who approved it and when it is due for review.

02

Risk and treatment

Risk register with assessment, heat map and a treatment plan tied to concrete actions with an owner and a deadline.

03

Incidents and non-conformities

The full flow from report to closure, with root cause analysis, corrective actions and verification of effectiveness.

04

Master schedule

Recurring tasks repeat on their own, with their periodicity and next execution date. Evidence is generated through the year, not the week before the audit.

05

Audits

Annual programme, planning, findings and action tracking, traceable from the finding through to its verified closure.

06

Indicators and dashboards

Views, Gantt charts and indicator panels for the management review, with the data the standard requires you to present.


What it looks like

ISMS risk panel in SORT Redmine: heat map and risk register
ISMS risks: heat map and register with treatment actions.
Master schedule in SORT Redmine: table of recurring tasks with periodicity, execution months and next run
Master schedule: security tasks repeat on their own, with their periodicity and next run.
Charts panel in SORT Redmine showing the distribution of incidents, corrective actions and assigned requests
Indicators for incidents, corrective actions and team workload.

What the rollout includes

  • Installation in the client’s infrastructure, or provisioning in the SORT cloud.
  • Configuration of the workflows for the standards within scope.
  • Initial load of existing documentation and risk register.
  • Training for the internal team that will operate the platform.

Frequently asked questions

Is SORT Redmine only for ISO/IEC 27001?

No. It is ready for any management system with the high-level structure: ISO/IEC 27001, ISO/IEC 20000-1, ISO 37001, ISO 37301, ISO 28000 and ISO/IEC 42001. When an organisation runs more than one standard, they share the same repository of documents, risks and actions instead of duplicating them.

Where is the data hosted?

Wherever the organisation decides. On premises, the platform runs entirely in your infrastructure and the data never leaves it. In cloud mode, it runs in SORT’s infrastructure, under the processing and retention terms agreed by contract.

Does it replace the document management system we already have?

Not necessarily. Many organisations keep their corporate repository for general documentation and use SORT Redmine for what the repository does not do: the life cycle of the management system —risks, incidents, actions, audits and schedule— which is where traceability gets lost.

What does it cost?

The platform is built on free software, so there is no per-user licensing. The cost covers implementation, configuration and support, and varies with the deployment mode and the number of standards in scope. It is quoted case by case from the intake form.

your business partner

Protecting you today, innovating for tomorrow