Governance, Risk, Compliance (GRC) Services
GRC is a strategy for managing an organization’s overall governance, enterprise risk management and compliance with regulations. Our structured approach helps you align IT with business objectives, while effectively managing risk and meeting compliance requirements, such as GDPR, ISO 27001, NIST, etc.
Features
- Security Maturity Assessment
- Cyber Security Programs
- Risk Assessment & Risk Management
- End to end ISO 27001, 22301 Management System Consulting
- End to end GDPR Compliance Services (Data, Flow Mapping, DPIA)
- Third Party Security Assessment
- Security Consulting as a Service
Benefits
- Cybersecurity strategy aligned with business objectives
- Compliance with industry standards and regulations
- Clear picture of organization’s current cyber risk posture and capabilities
- Informed view of investment options in managing cyber risks
Pricing
£242.86 to £951.05 a unit a day
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
4 0 1 4 6 0 4 2 2 6 0 3 8 1 7
Contact
UNI SYSTEMS INFORMATION TECHNOLOGY SYSTEMS COMMERCIAL SINGLE MEMBER S.A.
Yannis Psaltis
Telephone: +30 211 999 1162
Email: PsaltisY@unisystems.gr
Planning
- Planning service
- Yes
- How the planning service works
- Our unique and structured approach in Governance, Risk and Compliance consulting services helps you align IT with business objectives, while effectively managing risk and meeting compliance requirements.
- Planning service works with specific services
- No
Training
- Training service provided
- No
Setup and migration
- Setup or migration service available
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- No
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Cyber security consultancy
- Security audit services
Ongoing support
- Ongoing support service
- No
Service scope
- Service constraints
- Service is provided remotely
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- You will have access to a dedicated Security Consultant who will be able to answer queries regarding your needs.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
- You will have access to a dedicated Security Consultant who will be able to answer queries regarding your needs.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Baseline Personnel Security Standard (BPSS)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- TUV Nord
- ISO/IEC 27001 accreditation date
- 03/03/2021
- What the ISO/IEC 27001 doesn’t cover
-
Our ISO 27001 covers the following scope:
- Cloud services: IaaS, PaaS, SaaS
- ICT Hosting services
- Professional Services (Design, Installation, Administration and Technical Support) of ICT Systems - ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- No
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
-
- CISM
- CISSP
- ISO 22301
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
Uni Systems monitors developments related to environmental management and ensures the implementation of relevant regulatory frameworks and regulations, so that our operations will have the smallest possible impact on the environment. We, therefore, aim to continuously reduce energy consumption and increase the use of renewable energy sources. We strive to reduce our environmental footprint and choose technologies that optimise energy management, help protect the environment and save costs. We implement an integrated environmental management system, certified according to ISO/IEC 14001:2015. For 2022, a Scope 1, 2 and 3 study was carried out by external partner. The study was based on the GHG Protocol covering all the functions of the company and those of its subsidiaries in Greece and abroad. Analytically: • Direct emissions (Scope 1): Emissions from sources controlled by the Company, such as stationary and mobile combustion sources, as well as fugitive emissions from the air conditioning circuit in Uni Systems’ buildings. • Indirect emissions (Scope 2 & 3): Emissions from energy use and network losses (Scope 2), i.e. emissions from sources that do not belong to the Company, but are a consequence of its activities (Scope 3). Indirect emissions that fall under Scope 3 are related to: the supply of goods, services and fuel and their transport by third-party means of transport, the waste management outside the Company's facilities, the movement of employees (business trips and daily work commuting), and the possible investments. In 2022, the measurements of direct emissions (Scope 1) include the direct fugitive emissions from the release of the GHG (fugitive emissions) and the indirect emissions also include the activities abroad. Therefore, the data are not comparable with those of 2021 and we set 2022 as the baseline year.Tackling economic inequality
Uni Systems constantly strives to modernise its delivery and increase productivity and commits to the following activities: Adoption of Agile Product Delivery, a series of competencies to achieve organisational agility by quickly responding to market changes with innovative business solutions, based on three dimensions: ❑ Customer Centricity as mindset, ensuring a “whole-product” solution approach fostering customer lifetime-value. ❑ Design Thinking for ensuring solution is desired by client and users while also being feasible, economically viable and sustainable throughout its lifecycle. ❑ Develop on Cadence, Release on Demand. Developing on cadence provides a development cycle based on value as expressed by stakeholders. Containerization and modularization are ideally suited, since modules are progressively elaborated. Releasing is driven by Product Management, as market or regulatory priorities emerge or when being dictated by the product roadmap. DevOps & Continuous Delivery Pipeline, a series of practices that contain continuous exploration, integration and deployment, promoting innovation and quality. Enabling tools and methodologies as cloud computing, big data, analytics, to which Uni Systems has a proven track record. Continuous learning and skills development for all employees: ❑ Participation in recognized events, trainings/certification programs in respective domains, including carbon literacy trainings. ❑ 24/7 access to news publications and industry reports with the latest developments in climate change science/ policies. ❑ Access to vendors’ technical knowledge and expertise to follow up evolutions. ❑ Support from our Innovation Center, which detects indications of future changes in the contract domains. ❑ Access to lessons learnt and latest evolutions of similar projects ❑ Support from our wide pool of accredited carbon literate employees.Equal opportunity
Uni Systems upholds a strong commitment to diversity, equality, and inclusion throughout all levels of management. Our policy aims to cultivate a work culture that respects and appreciates individuals' differences, regardless of factors such as national origin, language, race, colour, disability, gender, age, religion, sexual orientation, or any other characteristic protected by applicable laws. Our Diversity, Equality and Inclusion Policy includes the following key elements: 1) Recruitment and Hiring: We strive to ensure a fair and unbiased recruitment process, actively seeking diverse candidates and providing equal opportunities for all. 2) Training and Development: We invest in training programs that promote diversity awareness, inclusion, and equal treatment. These programs are designed to enhance employees' knowledge and skills, fostering a culture of respect, empathy, and understanding. 3) Work Environment: We are committed to maintaining a safe and inclusive work environment where all employees feel valued, respected, and free from harassment or discrimination.4) Equal Pay and Benefits: We ensure that compensation and benefits are determined based on objective criteria, such as skills, experience, and performance, without discrimination. 5) Career Advancement: We provide equal opportunities for career growth and advancement to all employees based on their qualifications, skills, and contributions. We encourage employees to pursue professional development opportunities and offer mentoring and coaching programs. 6) Employee Resource Groups: We support the formation of employee resource groups that focus on specific diversity and inclusion topics. 7) Supplier Diversity: We actively seek to increase diversity among our suppliers and subcontractors. We encourage the inclusion of minority-owned, women-owned, and other diverse businesses in our supply chain. 8) Monitoring and Reporting: We regularly monitor and evaluate our diversity and inclusion efforts to measure progress and identify areas for improvement. We maintain transparent reporting mechanisms to track diversity metrics and share our performance with stakeholders.Wellbeing
Wellness initiatives have been prioritized and remote work was maintained at more than 60% throughout the year, while employee benefits include psychological and counseling support programs. In 2022, Uni Systems was certified according to ISO 45001:2018 Health and Safety Management System. A holistic wellness programme with indoor and outdoor activities was developed and implemented.
Pricing
- Price
- £242.86 to £951.05 a unit a day
- Discount for educational organisations
- Yes