
CRISAM GRC
We are CALPANA business consulting, an owner-managed consulting and software company founded in 2005, with main offices in Linz, Vienna, Hamburg and London. As specialists in GRC we empower organizations across the DACH region and beyond to embed sustainable, integrated risk management structures.
At our core is CRISAM®, our flexible, standard-based GRC platform. It brings together a wide spectrum of disciplines—integrated risk management (ERM/IRM), information security (ISMS), internal controls & audit (IKS), business continuity (BCM), project risk, data protection, compliance, ESG and industry-specific frameworks such as DORA, NIS2, B3S or VDA/TISAX — into one unified solution.
We accompany our clients every step of the way—from initial kick off to implementation, certification/audit readiness, and ongoing support.
Drawing on our extensive experience across industries like energy, finance, manufacturing, healthcare, and infrastructure, we design tailored frameworks that meet regulatory demands and operational realities. We maintain close ties with academic institutions and committees to incorporate the latest scientific insights - most notably, our award-winning work on AI-enhanced real-time risk detection (CRISAM.AI).
We pride ourselves on delivering method-driven, people-centric consulting backed by powerful software. Whether you're building ISMS, optimizing compliance, preparing for audits, or strengthening data protection, we provide the expertise and tools to make your risk management resilient, scalable, and forward-looking.