Organising information security
Build up your information security management and develop it further. Manage policies, assign responsibilities and record decisions traceably.
With Sardona, you bring together risks, policies, measures and evidence. This lets you organise your information security work and handle requirements traceably – with your own responsible staff and existing partners.

What is in place?
What still needs to be done?
Information security involves many tasks and people. Policies are stored in different places, measures are tracked in lists and knowledge of the current status is spread across individuals.
Sardona creates a shared working basis. You can see which topics are being worked on, who is responsible and where action is needed.
Build up your information security management and develop it further. Manage policies, assign responsibilities and record decisions traceably.
Capture and assess risks. Plan suitable measures and track their implementation. This keeps the link between the need for action and the actual work visible.
Bring together the documentation of your security work. This allows you to answer questions from executive management, from customers or in the context of audits in a structured way. Assessing the requirements, making decisions and implementing the measures remain with your responsible staff.
Information security extends beyond your own organisation. Sardona helps you assess supplier risks, prepare for the continuity of key business processes and put technical security information into context.
This includes functions for supplier risks, business continuity management and the review of the external attack surface and known vulnerabilities.
Document how personal data is handled and process data protection matters traceably. For the use of AI in your company, you bring together applications, assessments and usage rules.
Explore the features →The ISMS Copilot helps with questions about your company’s knowledge base. AI can also prepare risk suggestions and scenarios for crisis exercises. The professional assessment and the approval of results remain with the responsible people.
Sardona’s application and portal servers are operated in Switzerland. Regional deployments in Switzerland are set up for the AI functions.
We explain how access is organised and what information the AI takes into account on the Security and data protection page.
Security and data protection →Whether you are responsible for information security alongside other tasks or already have your own security team: Sardona provides a shared basis for collaboration.
Typical use cases include companies that process sensitive data, need to meet their customers’ requirements or want to organise their security work traceably.
View use cases →Sardona grew out of Burri Consulting’s work with companies of different sizes. The platform addresses tasks that arise regularly in practice: assessing risks, clarifying responsibilities, implementing measures and presenting the current status clearly.
Sardona is developed and operated by Burri Consulting. You can use the platform with your own responsible staff or existing partners. Consulting, implementation support and CISO as a Service can be agreed separately if required.
About Burri Consulting →In a demo, we show you the platform based on your questions and discuss how Sardona can support your information security work.
Request a demo