In short: Todyl GRC is the governance, risk and compliance module of the Todyl platform. It recommends frameworks for your organisation, maps existing controls and policies against them, runs security assessments and shows readiness per control in dashboards fed by Todyl SIEM. Frameworks include CIS Controls v8.1 and NIST CSF. It is licensed per device.
What Todyl GRC is
Most compliance work is spent proving that controls exist: gathering evidence, matching policies to requirements and finding the gaps. Todyl GRC (Governance, Risk and Compliance) puts that work in the same platform that runs the controls, so evidence from Todyl SIEM, SASE and Endpoint Security can feed directly into readiness dashboards.
The module has four parts:
- Compliance Assistant: asks questions about your organisation, such as geography, sector and size, and recommends the frameworks and regulations that apply
- Compliance mapping: maps your existing programme, controls and processes to individual framework requirements to show gaps
- Security assessments: structured reviews based on critical controls and defence-in-depth best practice, usable for your own organisation and for suppliers
- Documentation repository: stores your policies and procedures, maps them to requirements and supports policy attestation
Frameworks and what is included
| Area | Included |
|---|---|
| Frameworks out of the box | CIS Controls v8.1, NIST Cybersecurity Framework (CSF), NIST SP 800-171 Rev 3, HIPAA and CMMC, with more added over time |
| Assessments | Aligned to NIST CSF and CIS, with targeted improvement recommendations |
| Dashboards | Predefined and custom dashboards showing readiness percentage per control |
| Evidence | Native integration with Todyl SIEM for log sources and audit information |
| Policies | Documentation repository and policy attestation |
Several of the built-in frameworks are US regulations. the most useful are CIS Controls and NIST CSF, which are widely used to structure a security programme whatever the country. Todyl says frameworks are added continuously and can be added as needed; it does not list Cyber Essentials as a built-in framework, so we help you map the five Cyber Essentials controls yourself. In Todyl's packages, Essentials includes basic frameworks and Advanced and Complete include enhanced frameworks.
How Todyl GRC is licensed
Todyl GRC is licensed per device, billed monthly in arrears alongside your other Todyl modules, with no annual contract. It is included in all three Todyl packages, so if you take Essentials, Advanced or Complete you already have it.
It can be added to an existing Todyl estate on its own, but it is most useful when other Todyl modules are supplying evidence. Ask us for a quote and we will show the module and package options together.
Getting started
- Scope: run the Compliance Assistant and agree which frameworks matter to you, your customers and your insurer.
- Map: load your existing policies and record how current controls meet each requirement.
- Assess: complete a security assessment to find gaps, then prioritise the recommendations.
- Track: use the dashboards to show progress to your board, auditors or customers, and repeat assessments each year.
Who it suits and how we help
Todyl GRC suits organisations asked to prove security to customers, insurers or auditors, those aligning to CIS Controls or NIST CSF, and anyone preparing for Cyber Essentials or Cyber Essentials Plus who wants evidence in one place. It is not a certification in itself; it organises the work.
We set up frameworks, help map policies and controls, run assessments with you and keep the licence on your single invoice. See all vendors on our vendors A to Z, or go back to the Todyl overview.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Which frameworks does Todyl GRC support?
Out of the box it supports CIS Controls v8.1, NIST CSF, NIST SP 800-171 Rev 3, HIPAA and CMMC, and Todyl adds further frameworks over time.
Does Todyl GRC cover Cyber Essentials?
Cyber Essentials is not listed as a built-in framework. CIS Controls and NIST CSF overlap heavily with its five controls, and we help you map them and prepare for certification.
Is Todyl GRC included in Todyl packages?
Yes. GRC is included in the Essentials, Advanced and Complete packages, with basic frameworks in Essentials and enhanced frameworks in Advanced and Complete.
Is Todyl GRC licensed per device?
Yes. It is licensed per device and billed monthly in arrears with your other Todyl modules.