01 — GRC and framework compliance
  1. CSpace One
  2. CSpace 360
  3. CSpace Pro
  4. CSpace Elite

CSpace One

Turn cybersecurity frameworks into a program your team can manage.

Build assessments, collect responses, organize evidence, manage policies, measure compliance, and turn control gaps into accountable remediation.

  • Available now3
  • Available with configuration2
  • In development2
What it covers

CSpace One is the governance and compliance foundation of CSpace 360. It helps organizations organize requirements, assess controls, collect evidence, manage policies, identify gaps, and monitor compliance progress.

  • 01

    Frameworks

    A managed library of built-in and custom frameworks with domains, controls, and weighted questions in English and Arabic.

  • 02

    Assessments

    Assessments created from frameworks or templates, assigned to clients with deadlines, progress, and calculated results.

  • 03

    Evidence and policies

    Supporting documents associated with controls and responses, stored privately with database-controlled access.

  • 04

    Compliance visibility

    Scores, completion, open gaps, and framework progress for one client or the whole portfolio.

Capability modules — CSpace One

What the product does, and what state each part is in.

  • Available now
  • Available with configuration
  • In development
  • Planned
  1. 01
    Available now

    Framework library

    A managed library of cybersecurity frameworks and assessment structures, reusable across clients.

    • Built-in framework records
    • Custom framework creation
    • Framework titles and descriptions
    • Domains and controls
    • Control identifiers
    • Questions with weights
    • English and Arabic content
    • Active and inactive framework states
    • Vendor-specific framework catalogs
    • Framework seeding and reusable templates

    NoteFramework categories can include NCA Essential Cybersecurity Controls, SAMA Cybersecurity Framework, NCA Cloud Cybersecurity Controls, ISO/IEC 27001, NIST Cybersecurity Framework, PCI DSS, and organization-specific frameworks. CSpace 360 helps you manage alignment; it does not certify compliance.

  2. 02
    Available now

    Assessment management

    Create, assign, complete, and score assessments with a clear record of activity.

    • Create an assessment from a framework
    • Create a custom assessment
    • Reuse assessment templates
    • Clone existing assessment structures
    • Assign assessments to clients
    • Set deadlines
    • Organize questions by framework, domain, and control
    • Define question weight
    • Save responses
    • Review completion progress
    • Track assessment status
    • Calculate compliance results
    • Maintain client-specific assessment references
    • Review historical assessment activity
  3. 03
    Available with configuration

    AI-assisted assessment preparation

    AI assistance for structuring requirements and drafting supporting text.

    • Import or structure assessment questions
    • Organize unstructured requirements
    • Draft remediation guidance
    • Summarize security information
    • Support security-assistant conversations

    NoteAI output should be reviewed by a qualified security professional before it is treated as final compliance or remediation advice.

  4. 04
    Available now

    Compliance dashboard

    The current state of the program, at the level of a control, a client, or the portfolio.

    • Overall compliance score
    • Assessment completion
    • Open control gaps
    • Framework progress
    • Client-level progress
    • Portfolio-level trends
    • Domain and control performance
    • Items requiring follow-up
  5. 05
    In development

    Evidence management

    Supporting documents linked to controls and responses, with an audit-friendly trail.

    • Upload supporting documents
    • Associate evidence with controls or assessment responses
    • Review evidence status
    • Request missing evidence
    • Maintain an audit-friendly evidence trail
    • Control access to client evidence

    NoteAdvanced evidence workflows are labeled in development until all storage and review processes are fully available.

  6. 06
    Available with configuration

    Policy document management

    Policy and compliance documents stored privately and shared with the right clients.

    • Upload policy and compliance documents
    • Store files in private application storage
    • Apply database-controlled access
    • Associate documents with vendors and clients
    • Share approved documents
    • Download authorized documents
    • Maintain document metadata

    Direction

    • Policy templates
    • Approval workflows
    • Version history
    • Review dates
    • Automated renewal reminders
    • Control-to-policy mapping
  7. 07
    In development

    Governance reporting

    Reports for management, customers, and auditors.

    • Executive compliance summaries
    • Framework progress reports
    • Assessment response reports
    • Gap reports
    • Evidence-status reports
    • Remediation progress
    • Client-branded reports
    • Exportable management documents
How the work moves

Workflow

Compliance workflow

10 steps
  1. 01 Choose framework
  2. 02 Create assessment
  3. 03 Assign to client
  4. 04 Collect responses and evidence
  5. 05 Calculate compliance
  6. 06 Identify gaps
  7. 07 Create remediation work
  8. 08 Track progress
  9. 09 Reassess
  10. 10 Report improvement
Good to know

Positioning we stand behind.

Alignment, not certification

CSpace 360 helps organizations assess, organize, and monitor their alignment with selected frameworks. Certification and regulatory acceptance depend on the relevant authority, auditor, assessor, scope, evidence, and organizational implementation.

AI supports professionals

AI-assisted recommendations are provided to support qualified professionals. Review recommendations and validate changes before applying them to production environments.

Next step

See CSpace One in a demonstration built around your requirements.

We will walk through the workflows that matter to your organization or service model, with the capability status of each module made clear.