Interested in subscribing to ORCA's GRC Software?

Scalable, powerful, and easy-to-use platform

We know that every organization is different. Our specialists will work for hand in hand with you to customize the ORCA solution. Thus, the modules, supplements, and support plan will be suitable for your organization.

Specialized Consultancy

By subscribing to ORCA, you will receive support from specialists in governance, risk, compliance, and cybersecurity.

Fast deployment

In a matter of weeks, you will be using ORCA GRC to take charge of your business potentical risks through automation.

Information security

We offer the highest standards of information security management. We are an ISO 27001 and 27017 certified company.

Scalable solution

ORCA can be easily rolled out to other areas, control processes, and risk management of the organization according to your needs.

Platform environments

You can select the type and number of environments within ORCA:
Productive environment
QA quality testing environment.

All our environments include:

Support, maintenance and upgrades throughout the subscription life cycle

Secure private cloud

Ability to choose the required storage capacity

Routine maintenance and automated backup services

Security protection services (Firewall, Antimalware, Antivirus)

Information Disclosure Protection (DLP) services

Network capacity and availability monitoring

Implementation modules

You choose the configuration for the various execution and management processes.

Risk management

Supplier management

Audit management

Cybersecurity

Regulatory compliance

Incident management

Business continuity

Access Gateway

You select the number and type of logins you need.

Administrator

User that has management functions in the platform, grants permissions, adds and removes users and generates structures and modifies control sequences.

Architect

Operational user who will have the day-to-day functional operation with the flows and processes, defined in ORCA, they are area or process leaders, with capabilities to coordinate, supervise tasks and projects, as well as to create and conclude them within the platform.

Operative

A user who only performs specific tasks within the platform, such as answering a questionnaire, uploading evidence, viewing a report, or having a single view of a dashboard.

Supplements

ORCA supplements are solutions designed to accelerate the speed of adoption of a monitoring platform (GRC). ORCA comes with pre-loaded content, which you can easily integrate into your account.

Business continuity

FFIEC TI
ICREA
ISO22301

Data protection

GDPR
LPDPPSO

Risk management

ISO31000
ISO31022
ISO27005
COSO

Auditing and quality control

ISO9001
ISO19011

Information security

ISO27001
ISO27002
ISO27035
CobIT
NIST 800-31
NIST 800-53
OSSTMM
PCI - DSS
ISO27032
OWASP

Information Technologies

ISO20000
ITIL
CobIT

Financial sector

Financial and banking notices
SOX (Sarbanes - Oxley)
PCI
Compliance checklists with financial supervisory agencies
Banxico - SPEI
CNBV (National Banking and Securities Commission)

Environmental and labor regulations

ISO14000
Health and Safety
STPS (Occupational Health and Safety)
NOM-035 - Occupational health standards

Standards

ISO 18001
ISO 19600
ISO 45001
ISO 22000
SEMARNAT

Don't see what you need?

ORCA is flexible and allows you to create new supplements to adapt to the risk assessment and compliance challenges your organization encounters.

Specialized Consultancy

By subscribing to ORCA, you will have access to a group of specialist who will accompany and advise you at all times and for the duration of your subscription.

In addition, you get access to and use of our digital library:

Ongoing training

Interactive support

Digital content for end-users

Video tutorials

Advice on governance, risk, compliance, audit and cybersecurity practices