Process and Technology Governance · Process governance, application inventory and IT contract management software

Govern your processes and the technology they run on: owned, documented, reviewed and linked to risk and compliance

What your organization does and what it runs on, kept governed: capabilities, processes and services — each owned, documented in SOPs, measured by KPIs and reviewed on a cycle — and the applications and providers behind them, with every contract and licence, when it renews and what it costs.

Included in Small business, Mid business, Large business, Dedicated Hosting

What Process and Technology Governance does

Processes, services and capabilities

  • What the organization does, placed under the unit that does it — capabilities holding the processes that deliver them, and the services it provides
  • An owner for every one, who keeps its details current: purpose, customers, how often it runs, how critical it is, where, and who runs it
  • What each depends on — other processes, systems and suppliers — and what depends on it
  • Your own attributes, numbering and criticality scale; export what the filters show as a spreadsheet

SOPs and KPIs

  • SOPs inside each process and service — the procedure written out, with its forms and documents uploaded or linked, and its own review date
  • KPIs for each, so a process is measured as well as described
  • Reviewed on a cycle, with overdue reviews flagged

Applications and providers

  • Applications, cloud providers and hardware providers in one list, told apart by category — each with the company behind it, its criticality and its status
  • Contracts and licences on every one of them: the department that holds it, the vendor, an owner, the contract document, and the dates it expires and renews — with a renewals report and a notice to the owner ninety days ahead
  • Each contract's value in your organization's base currency, totalled per currency — currencies are never added together
  • Cloud providers with what each provides and the countries your data is hosted in; hardware providers with what each supplies
  • Every application tagged with the cloud and hardware it depends on, so each provider shows what stops if it does

Dashboard

  • How the catalogue is spread — by kind, by criticality and by department — and how the inventory is: by category, application type, criticality and status
  • What needs attention: a critical process with no SOP in force, reviews overdue, entries with no owner; contracts expired, expiring or renewing by themselves within ninety days, and those nobody owns
  • What the contracts in force cost, in your base currency — by category, business department, vendor and item — with the amount at stake in the next ninety days
  • The most depended-on processes and providers, so what the most else rests on is in view

Governed across the product

  • Named by risks, Records of Processing Activities and audit scopes, and each process shows where it is named
  • Optional maker-checker approval on activating, retiring, reactivating or deleting a process, service or capability, deleting an application or provider, and deleting an SOP
  • Its own module roles: owners maintain what is theirs, Module Managers shape the catalogue, the Module Admin sets its numbering and attributes

Process and Technology Governance: questions and answers

What is process governance?
Keeping what the organization does under control: every process, service and capability owned, documented in SOPs, measured, reviewed on a cycle and connected to the risks, data processing and audits that concern it.
Where do SOPs live?
Inside the process or service they describe. Each SOP is written out in AI Pazz Govnex, with its forms and supporting documents uploaded or linked.
Does it keep an inventory of applications and suppliers?
Yes. Applications & Providers lists the software your processes run on and the cloud and hardware providers behind it. Each application is tagged with the providers it depends on, each provider shows the applications that depend on it, and all of them carry their contracts and licences.
Can we see what our software and providers cost?
Yes. Each contract or licence can carry its value in your organization's base currency. The dashboard totals the contracts in force and breaks the figure down by category, business department, vendor and item, with the amount expiring or renewing in the next ninety days. Amounts entered in another currency are shown separately, never added in.
Which plans include Process and Technology Governance?
Small business and above — the business plans. It uses the units kept in the Organization module.

Works with

Small business and up

Organization structure, committee and site management software

Organization

Model the organization: its units, who leads each and who they report to, its people and their reporting lines, its committees and its sites — used by every module to track, assign and report by unit.

  • Units of every kind — CEO office, division, business unit, department, team, function — nested in whatever order your organization really runs
  • Everyone in the organization, licensed or not, with their email and primary unit
  • Offices, plants, warehouses and other places the organization works from, each with its country and the unit it belongs to
More about Organization
Small business and up

Risk management software

Risk Tracking

Risk registers at every level of the organization: score risks, treat them, evidence their closure, and raise the ones the board should see.

  • As many registers as your organization needs, each run by its own administrator
  • Risks at organization, unit or individual level, each with an owner
  • Optional approval before a risk closes — by the register’s administrator or someone you name
More about Risk Tracking
Small business and up

Data protection compliance software

Data Compliance Tracker

What you hold data about and what you do with it: entities and their records with a business owner and a data owner for each, and Records of Processing Activities with a compliance checklist answered item by item, rated for risk, with the DPIAs and LIAs they need.

  • Entities — Customer, Employee, Supplier — each with a business owner and a data owner
  • A RoPA for each activity: its purpose, its owners, and the records it processes — what they hold read beside it
  • Every RoPA rated low, medium, high or critical from its checklist answers — worked out each time it is read, never typed in — and told when it needs a DPIA or an LIA, and why
More about Data Compliance Tracker