Abstract: A system includes a legal hold notification tool including a legal hold management module to manage a legal hold issued on an organization, the legal hold management module generating a notification of the legal hold to a user subjected to the legal hold, and a legal hold affirmation module to obtain an affirmation of the legal hold from the user on periodic basis throughout the duration of the legal hold.

Abstract: A system includes a standards inventory database to store at least one control model, the at least one control model including at least one control objective and one or more controls, wherein each of the one or more controls is related to at least one asset of an organization, a tests datastore to store one or more control tests to be applied to the at least one asset of the organization, each of the one or more controls being associated with at least one of the one or more control tests, and a server including a testing tool to evaluate each of the one or more controls using the at least one of the one or more control tests associated with each of the one or more controls and to assign a status to the one or more control tests, and a metrics engine to track performance metrics of each of the one or more controls based on the status of the one or more control tests to provide trends in compliance with the one or more controls.

Abstract: A business continuity (BC) system is described that includes an asset database, a BC plan, and a BC portal. The asset database contains a complete and up-to-date inventory of the organization's assets. The BC plan covers a top level administrative unit and all administrative units reporting to the top level administrative unit. The plan contains one or more BC groups that are responsible for a portion of the recovery effort and identifies of one or more mission critical applications that are covered by the plan. The BC portal may be used to maintain the plan, educate employees regarding BC plans, and push information specific to the employee to the employee. The information may be predetermined messages or changes to the employee's role in the recovery effort.