CORE Compliance is a GRC application for compliance managers, IT GRC leads and CISOs who run more than one framework. It manages security controls, control testing, evidence collection, audit findings and audit readiness in one place, on Joget DX 9.

Running SOC 2, ISO 27001 and HIPAA separately means testing the same control three times. CORE maps one control library to all three. Test once, and it counts for every framework it satisfies. The dashboard shows audit readiness as a number you can defend: the count of requirements whose control passed its latest test.

Key Features

• 61 preloaded controls mapped to SOC 2, ISO 27001:2022 and the HIPAA Security Rule.
• Control testing with owner, test frequency, written procedure and signed results.
• Evidence vault with SHA-256 hashing, logged downloads and no deletions.
• Issues raised automatically when a test fails.
• Audit packs per framework and period, with a read only auditor login that expires.
• Two AI assistants in the Joget AI Agent Builder: one suggests a test result from the evidence, one maps any requirement to the control that covers it. Both suggest. A person signs.
• Add NIST CSF, PCI DSS or a local regulation yourself. Frameworks are data, not code.

How do I get CORE Compliance?

CORE is a licensed app for Joget DX 9 Enterprise. Contact Joget or write to sales@joget.org for a tailored demo and pricing.
We also work with specialist GRC consulting partners who can configure CORE around your frameworks and take your programme through to audit ready.