ISMS & Risk

Officer and role register

Who holds which statutory function, and whether the appointment is still valid

Information security and data protection officer, safety officer, occupational safety specialist, company physician, fire protection, dangerous goods, waste, emission control, radiation protection, laser safety, anti-money-laundering and outsourcing officer, plus committees and elected offices: the register keeps in one place who holds which statutory function in the organisation. Each appointment carries the certificate, appointment and revocation date, term with follow-up, delegation of duties, the required qualification evidence, the named deputy and the notification to the supervisory authority. No function is marked "appointment required" out of the box, and that is deliberate.

ISO 27001DSGVOArbSchGASiGBSI IT-Grundschutz ORP.1
Features

Your benefits

1

No automatic derivation from headcount

The thresholds for mandatory appointments mostly hang on installations, quantities and activities: waste volumes, dangerous goods transport, laser class 3R. Deriving them from headcount would simply be wrong. So every function carries its trigger as text, and the organisation decides and documents.

2

Follow-up at 90, 30, 7 days

A fixed-term appointment is presented three times before it expires. Where nobody extends or refills it, the function shows in the cockpit as expired, alongside vacant, evidence missing, notification open and conflict of interest.

3

The evidence hangs on the person

Qualification evidence is maintained on the person, not on the appointment. The register reads it and shows a traffic light. The evidence travels along when the same person takes on a second function, and the conflict-of-interest check sees both.

Capabilities

All capabilities at a glance

  • Catalogue of around 18 functions with legal basis and trigger in plain language, extensible and deactivatable
  • Applicability decision per function with reason: mandatory, voluntary, not applicable
  • Appointment with person, scope, appointment and revocation date, term and certificate in the DMS
  • Delegation of duties under Section 13(2) ArbSchG as its own evidence
  • Qualification evidence on the person with traffic light, deputy with deputising case
  • Notification to the supervisory authority with date and reference, for instance under Art. 37(7) GDPR
  • Conflict-of-interest check with reasoned case-by-case release
  • Cockpit across all mandatory appointments, three dashboard tiles, daily deadline run
  • Basis for medical device operation, classified information protection, occupational safety and fire protection
Result

One list that gives the same answer in the audit, at the accident insurer and at the supervisory authority: who is appointed, since when, until when, with what evidence.

Experience Officer and role register live

Schedule a no-obligation demo – we will show you the module with your own use cases.