Architecture & Design

Compliance Aspekte is designed to automate and simplify the activities associated with corporate governance, compliance, and risk management. As a modern solution , it is developed using the latest industry practices for software development with the modern tech stack in its core (Angular, Java). The modularity of Compliance Aspekte allows us to flexibly customize the system to customer needs while ensuring “one system vision”.

Developing a GRC solution, we set top priority for product security. Our software engineers use SSDLC (Secure Software Development Lifecycle) methodology and other practices to assure product security. We also follow the main requirements of the following standards and methodologies: ISO 15408, ISO 27002, OWASP Risk Rating Methodology.

Our other priority is to develop a convenient and user-friendly solution. Our UX and UI engineers for interaction and visual design conduct the heuristic evaluation after Jakob Nielsen to assess the usability of the product after any changes have been implemented.

System Architecture

Compliance Aspekte System Architecture
Compliance Aspekte System Architecture

Platform

The application is implemented as a Java EE application compatible with Servlet container 4.0 specifications. By default, it is delivered with the Tomcat application server.

Configuration

Application configuration is made in property files.

Persistence

Data persistence is addressed using a relational database and JPA Object Relational Mapping layer (Eclipse Link).

Internationalization

All string resources are externalized to assure smooth localization. By default, the solution is delivered with the support of German and English languages.

Logging

Logging is implemented based on the Logback framework. The solution supports several levels of logging.

Performance

The system is responsive under much data – requirements, controls, threats, and the connections between them.

Scalability

The application is stateless in order to easily support horizontal scalability.

REST API

REST API is used for data interchange between client and server as well as for the integration with different systems (ServiceNow, SAP, etc.)

Security

Security is based on the JWT (JSON Web Token) flow. HTTPS certificates can be issued and then set up on the level of the servlet container (Tomcat) so that traffic between client and server parts of the solution is properly secured.

Hardware and system requirements

The following system requirements are recommended to guarantee the proper operation of Compliance Aspekte:

  • CPU: Core i5
  • HDD: at least 64 GB of free hard disk space (SSD recommended)
  • RAM: at least 16 GB
  • Operating system: Windows and Linux-based platforms
  • Java
  • Database support: Oracle, Microsoft SQL, and MySQL

Request more information about our solution and find out how our solution can address your specific security issue.

Request a trial

Try

Benefit of free usage of the Compliance Aspekte for 3 months to find out how the solution can optimize and streamline your compliance management. Please fill out this form, choose the standards and features you are most interested in. Our consultants will be glad to deliver a personalized webinar for you explaining step by step all the benefits of the Compliance Aspekte adoption.