Njordium Cyber Group, a Swedish developer of cybersecurity and risk management software, has launched Inspect360 GRC, a platform built to give organisations an always-current picture of their governance, risk exposure and ability to prove compliance.
The new governance, risk and compliance tool sits alongside Inspect360 TPRM, the company’s existing third-party risk management product. Together, the two form a single Inspect360 platform that links internal oversight with external supplier dependencies, ending the practice of running them as separate programmes.
Njordium is responding to a growing problem of fragmentation. Many firms keep regulatory obligations, policies, risk registers, audit evidence and supplier reviews in different systems, spreadsheets and folders. Meanwhile, EU rules such as NIS2, DORA and GDPR now demand that cybersecurity risk, operational resilience and supplier dependencies be handled through a documented, auditable and continuous process with defined ownership.
According to Njordium, scattered tooling forces teams to spend heavily on upkeep without delivering the risk insight leadership needs or the audit trail regulators expect.
Inspect360 records frameworks, policies, risks, controls, evidence, exceptions and audits as one traceable dataset. Users can map a control and its supporting evidence once, then apply it across several regulatory standards.
Supplier and sub-supplier data connects directly to the wider risk environment, while inherent and residual risk, treatment plans, approvals and review cycles sit beside the relevant controls. The system also logs who held information, who took a decision, the reasoning behind it and its outcome.
The platform integrates with ServiceNow, Microsoft, Jira, SAP, GitLab, GitHub and other tools, and supports Google and Microsoft OAuth sign-in, including YubiKey and Google Titan hardware keys.
AI features help cut repetitive tasks, spot gaps and flag issues needing attention, while keeping people accountable. Evidence and decision records are maintained continuously, so teams need not rebuild them before an audit.
Njordium Cyber Group is a European company that develops Inspect360 in Sweden with the needs of European organisations in mind.
Customers can run Inspect360 as a managed SaaS service or install it on-premises, an option aimed at organisations facing strict regulatory, contractual or data sovereignty demands.
Njordium Cyber Group CEO Mads Becker Jørgensen said, “Compliance should tell us something about how well an organisation is governed; it should not become the objective in itself. With Inspect360 GRC, we wanted to move the focus away from maintaining individual compliance checklists and towards understanding the relationships between requirements, controls, evidence, decisions and the risks they are intended to manage.”
Njordium Cyber Group senior advisor Kim Haverblad said, “Organisations don’t experience internal risk and third-party risk as two separate realities. A critical supplier can affect a business service, regulatory obligation, control, risk treatment and management decision at the same time. Yet those relationships are often managed in completely different systems.
“Inspect360 is about connecting that picture so management can understand not just whether something is compliant, but what it affects, who owns the decision and whether the evidence supports it.”
Haverblad added, “Data sovereignty should ultimately be a governance decision made by the organisation. We designed Inspect360 so that the deployment model does not dictate that decision.”
Copyright © 2026 FinTech Global
