Other cookies are configurable.
Compliance evidence, produced by running the programme.
Audits fail on retrieval, not on capability: the exercise happened, the plan was updated, the action was closed, and none of it can be found when the supervisor asks. Resilience Arena structures the programme so every activity lands as evidence, mapped to the obligation it satisfies.
How compliance becomes a by-product
The compliance evidence module of Resilience Arena captures plans and their updates, exercises and their scores, dependency records and action closure as structured records in one governed data model, and maps each record to the requirements of ISO 22301, NIS2, DORA and ISO 27001, so that audits and regulator questions are answered from the system rather than from scattered files.
The shift regulators have made is from documented intent to demonstrable capability: NIS2 and DORA supervisors increasingly ask not whether a plan exists but whether leadership has been tested against it and whether the result can be shown. That question is unanswerable from a shared drive. It is answerable in seconds from a system in which the exercise record, its deterministic score, the findings and the closed actions are one linked chain, stamped and exportable.
Because the platform is built by the practitioners who design programmes for clients, the data model matches how resilience work is actually done rather than a generic GRC abstraction, and the evidence it produces is the evidence our consultants know auditors and supervisors actually request.
Frequently asked questions
Which obligations can Resilience Arena evidence?+
The programme structure, exercising records and reporting are designed to evidence the requirements found in ISO 22301, NIS2 and DORA, with ISO 27001 alignment for the information security dimension, so one programme serves certification and supervision together.
How is this different from a document management system?+
A document system stores files; this module structures activity. An exercise is not a PDF but a linked record: scenario, participants, deterministic score, findings, actions and closure, each mapped to the clause or article it evidences.
Can we export evidence for an auditor?+
Yes. Evidence is assembled from the live system into audit ready output, so the response to a certifier or supervisor is generated rather than compiled, and it is consistent every time.
Does it replace our consultants or our ISMS?+
No. It is the operating layer that keeps consulting outcomes alive and the programme measurable. Strategy and design still need expertise; see our consulting practice for that side of the work.
Where does the data live?+
The platform is Swiss engineered with European and Swiss data residency, offered hosted or on premise, in editions that scale from a focused essentials deployment to a full enterprise programme.
The platform
Crisis Simulations
Realistic, escalating scenarios run inside the platform, with every decision scored deterministically and captured as exercising evidence.
Gamification
Training, exercising and plan upkeep as scored, engaging activity, keeping the programme alive between incidents.
Confidential Walkthrough
From a tailored walkthrough to a scoped pilot with a real group: board ready evidence before any wider decision.
Resilience Arena
The full platform: plans, dependencies, simulations, scoring, gamification and audit ready reporting in one governed environment.
Answer the next audit from the system.
Bring your last audit request list to a walkthrough; we will show you each item answered from a live programme.
Book a consultation