Other regulated businesses

Start with the framework you need. Add the next one without starting over.

Microfinance institutions, digital lenders, credit bureaus, virtual asset service providers and the technology firms that serve them answer to more than one regime. CyberPlug reuses the controls and evidence you have already built.

Book a demo Browse frameworks

The pressure

Each new licence brings a new spreadsheet

Every new regulation or customer requirement starts a new file, an owner and an evidence hunt.

Credit bureaus and virtual asset service providers fall within the Bank of Ghana's directive.

Technology providers to regulated institutions are asked for ISO 27001 and security evidence by every customer.

What changes

Add a framework, keep your work

Reuse across frameworks

Evidence collected for one framework counts for the next.

Compliance management

Evidence without exports

Read-only connectors keep evidence current every 24 hours.

Evidence collection

Risk in one register

Score and track risk against every regime you answer to.

Risk management

A fast start

A first workspace takes about an hour.

Frameworks that apply

Frameworks available today and next

ISO 27001

ISO/IEC 27001:2022

The international standard for information security management, with all 93 Annex A controls mapped and a Statement of Applicability built in.

See how it works

BoG CISD

Bank of Ghana Cyber & Information Security Directive

Board oversight, the CISO mandate, cyber risk management and cyber defence requirements for institutions regulated by the Bank of Ghana.

See how it works

Ghana DPA

Data Protection Act, 2012 (Act 843)

Ghana's data protection law: lawful processing, security safeguards, breach notification, data subject rights and registration with the Data Protection Commission.

See how it works

PCI DSS

Payment Card Industry Data Security Standard

Security requirements for organisations that store, process or transmit cardholder data.

See how it works

ISO 42001

ISO/IEC 42001:2023

The management system standard for organisations that build or use AI systems.

See how it works

Your regulator is not listed? Tell us. New frameworks are added as data to the library.

Who does what

Four roles, one workspace

In a smaller institution one person often holds several of these roles. The platform lets one person work in all of them.

Administrator: Sets up the workspace, invites the team and connects systems.
Compliance Officer: Runs readiness checks, reviews evidence and manages gaps.
Risk Manager: Logs risks, scores them and tracks mitigation.
Auditor: Gets read-only access to evidence, history and approvals.

FAQ

Questions we hear most

We are not a bank. Is CyberPlug for us?

CyberPlug is for regulated institutions and the technology firms that serve them, including microfinance, digital lending and payments.

We need one framework. Can we start with just that?

Yes. Choose the frameworks you answer to during setup, and talk to us about adding others as your obligations grow.

A framework we need is not listed. What now?

Tell us. Adding a framework is a data task in the library, so the question is timing.

Can a technology company use this to answer customer security reviews?

Yes. Keep the controls and evidence current in one place and share read-only access when a customer asks.

Tell us which frameworks you answer to.

Book a demo