CONTECHNET ISMS Tool INDITOR ISO is a software solution designed to support organizations in implementing and managing an Information Security Management System (ISMS) according to ISO/IEC 27001 and 27002 standards. The tool is part of CONTECHNET's modular GRC management software suite. The software provides integrated catalogs for DIN EN ISO/IEC 27001/27002 and additional frameworks including B3S, IT-Sicherheitskatalog, TISAX/VDA-ISA, VAIT, BAIT, DIN EN ISO 9001, ISO 27019, and VdS 10000. It includes implementation recommendations for norm texts to guide users through the certification process. INDITOR ISO follows a structured five-step approach: requirements catalog management, asset management, protection needs assessment through customizable Business Impact Analysis (BIA), risk assessment, and risk treatment. The asset management module allows organizations to manage various asset types including processes, personnel, and infrastructure, with the ability to create asset trees and groups to map dependencies. The platform includes integrated risk management capabilities where users can assess risk probability and impact, then define treatment strategies and derive tasks for responsible personnel. An audit management module enables organizations to plan and manage audits, verify implementation status, and prepare for ISO/IEC 27001 certification. The software supports cross-departmental collaboration and provides a shared data foundation with other CONTECHNET solutions.