Manual

ISMS Lite keeps ISMS evidence, deadlines and relationships in one instance. This manual covers application use and instance administration.

Getting started

• Installation and initial setup
• Dashboard and daily work
• Governance and evidence
• Select multiple frameworks
• Groups for policies and training

Modules

• Assets and vendors
• Incidents, emergency plans, BCM and recovery
• Data protection and processing register
• Users, access, lifecycle and training

Administration

• Settings and integrations
• Backup, updates and operations

API and data sources

• REST API and MCP: access, domain coverage and permissions
• Connect data sources with push ingest: setup and operations
• Asset export and Veeam adapters
• Push ingest: contract, evaluation and error reference

The extended API and push features are not yet included in v1.25.0. These chapters identify that status and describe the requirements on your instance.

Roles and access

Navigation only shows modules which the signed-in account may read. Write permission allows creating and changing records. Administration, roles, integrations and system backup are restricted to administrator accounts. Linked module data also requires read permission for its source module.

Basic workflow

1. Define scope, organisation, framework and roles.
2. Record assets, vendors, risks and measures.
3. Maintain policies, SoA and audits.
4. Work through dashboard deadlines and store evidence in the relevant module.
5. Check backup, updates and the audit log regularly.