verinice 1.9 available

verinice 1.9 is available for download. The open source tool for the management of information security (ISMS) now integrates the updated VDA 2.0 questionnaire. In addition, the verinice team at Göttingen based SerNet GmbH made creating reports, managing users, groups, and permissions a lot easier.

"The catalog of the Association of the Automotive Industry (German VDA) for an Information Security Assessment (ISA), is included since verinice 1.2 and proved to be very popular," says verinice team lead Alexander Koderman. The VDA catalog has now been completely revised and adjusted to the new requirements of ISO 27001: 2013. As VDA ISA Standard 2.0 it is implemented in verinice 1.9. All changes were made in close cooperation with the working group of the VDA. Koderman: "When it comes to the conformity of the standard in verinice to the questionnaire, we can guarantee 100% accuracy."

"The catalog is also of interest outside the automotive industry," notes Koderman. The term 'Auto' is not mentioned once, he says with a wink. "Instead, the catalog grants easy access to information security management, even for beginners." Especially for smaller companies who don't want to work with ISO 27001 or basic protection, this is attractive. "At it-sa 2014 in September we again experienced how high the demand for such opportunities actually is." So he's confident that the ISA standard VDA 2.0 in verinice will address a wide audience.

Another bonus: If you have worked with the previous version, you can import the results into the ISA standard VDA 2.0. Koderman: "It was important to us that existing users may experience as little effort as possible for the update and the re-evaluation." Thanks to the so-called 'unify function' users do not have to start from scratch.

The innovations in the server extension verinice.PRO include a completely new user and group management. Likewise, the dialog for assigning access rights to objects (read and write) has been simplified. "In terms of user-friendliness we again took a big a step forward," says Koderman. Working with verinice daily or getting started will be much easier.

The central report repository makes vDesigner generated reports available for all users of verinice.PRO. Even in offline mode, the reports are accessible. In addition, reports can be stored local - e.g. for confidential evaluations. Output formats (DOC, XLS, PDF ...) can be arbitrarily set - in addition can now be individually stored on company policy templates customized server-wide default.