Information Security Management System

BCMfort is a pragmatic, uncomplicated Information Security Management System (ISMS) that will ensure your organisation can manage its Infosec programme, no matter the number of staff, locations or entities. BCMfort can be hosted in the cloud or on Premises to ensure that your availability, reliability and security needs are fulfilled


Proactive and Reactive

BCMfort ensures organisations are prepared by taking both a proactive and reactive approach to mitigate risk and ensure business continuity. It is essential that we understand the risks our organisation faces and takes proactive steps to reduce their likelihood and impact. BCMfort also ensures that you know what needs to be done and by whom when it does go wrong.


Centralised storage of all BCM related information in a pragmatic, intuitive solution that will ensure your organisation can manage its BCM programme by consolidating all its information to reduce duplication, no matter the number of staff or locations.

Accountability and transparency

Transparency as the system is audit-able and traceable with logging of all changes to the system. Staff are assigned access by using the user, team, tag and business unit concepts to define the BCM roles and responsibilities.

Robust communication

BCMfort can be configured to contact your staff through email in an emergency. Alternative communication is possible by interfacing with different solutions such as Twilio for SMS and voice notifications. Please contact us for additional information.

Data analysis

Is the organisations information up to date, without looking at thousands of lines of code, BCMfort gives Coordinators and users powerful reports and dashboards to ensure that staff stay on top of this important task.

Total staff involvement

BCMfort embeds BCM with business leaders and staff to ensure commitment to develop and implement the required BCM policies, roles and responsibilities.

Continual Improvement

Continuous improvement, regarding organisational availability and performance, focuses on improving resilience through continuous and incremental improvements to processes, controls and the mitigation of threats and vulnerabilities.

Integrated control management

BCMfort integrates additional frameworks such as Cyber Security, OH&S, Quality Management and Environmental Management.

Resilient staff and systems

A resilient workforce is one that performs well under pressure and deals quickly and efficiently with disruptions. Resilient systems come with careful analysis and implementing controls to ensure availability.



Stakeholders enter new observations and review observations that have been entered and shared by other users for easy management from one screen, The Observation owner delegates and Action Owner, Action Plan and a Due Date to ensure that the appropriate actions are taken to resolve the observation. The observation allows you to create comments for all the […]

Certificate Module

Are our factories, office and distribution centres up to date with their certificates. If supplier certificates are not up to date can this impact the supply chain? The BCMfort Certificate Module allows you to set a start and end date to easily monitor when certificates need to be replaced for each business\node in the network […]

External requirements

Consolidate and manage the organisations External Requirements, such as Contracts, SLAs, Regulations (Government, Industry)

Policy Manager

Create policies and link these to Controls in the Control Management module. Replicate Policies to other applications through our API to ensure only one copy of each policy.


BIG DATA – large organisations may have thousands or even tens of thousands of nodes, so automation of data is essential to the success of the project.  BCMFORT has been developed using the Python Language and the Python Django Framework for its backend Business logic. This also includes using the Django Rest Framework for the restful […]


BCMfort allows customers to create templates to speed up the process of building the organisation’s supply chain and its different nodes. This means when the initial system is created, templates can be linked to Nodes to pre-populate the system with data. Many Processes, Risks, Resources and Controls will be the similar or the same for […]

Information Security Management System

Planning is bringing the future into the present so that you can do something about it now.