Public Relations

Asgent Announces the Release of M@gicPolicyCoSMO Ver.2.01, an ISMS Development and Management Streamlining Tool

- A proven tool for obtaining and maintaining ISMS certification -

December 7, 2005
Asgent,Inc.

Asgent, Inc. (President&C.E.O.: Takahiro (Shuji) Sugimoto, located in Nihonbashi, Chuo-ku,Tokyo), a pioneer in security solutions, announces the release of M@gicPolicyCoSMO Ver.2.01, an ISMS (Information Security Management System) development and management streamlining tool.

It is more important than ever before for corporate entities to be able to comply with, and to provide accountability for, various legislation such as the “Personal Information Protection Act”, “Unfair Competition Prevention Law”, “J-SOX”, and various requirements such as BCM (Business Continuity Management), improvement of customer service and so on.

In this corporate environment, the development and management of Information Security Management Systems (ISMS) as corporate infrastructure is becoming increasingly important.

ISMS development requires a massive amount of work including information asset identification and risk assessment, stipulation of internal process, as well as review and modification of the process, depending on changes in corporate strategy and the business environment resulting from security incidents.

Accordingly, a tool capable of providing support for proper management of the work involved, and smooth succession of ISMS management following personnel changes is required.

“M@gicPolicyCoSMO” is an ISMS development and management streamlining tool developed by Asgent. It is a professional tool, providing effective and proper risk assessment processes and enabling corporate entities to effectively manage the PDCA (Plan, Do, Check, Act) cycle which is an essential component of ISMS operations between the management class, security committee members and employees.

The latest version of M@gicPolicyCoSMO has improved risk assessment capabilities, enabling corporate entities to identify information assets in relation to operational work flows.

The addition of a security incident notification function enables a user to record the content of a security incident in M@gicPolicyCoSMO, the details of which are automatically conveyed to the appropriate personnel, and which can be traced through the resolution process by the security manager.

Moreover, various functions for management streamlining such as To Do message function, schedule function, and an improved backup restore function have been added in the new version.

”M@gicPolicyCoSMO” complies with BS7799-2：2002 and ISMS ver.2.0 and will also comply with planned future requirements of ISO/IEC27001 and JIS Q27001 such as management plan, ledger sheet etc.

■ M@gicPolicyCoSMO

Release Date: 2005/12/7

Proposed Sales Price: open price

[New Function]

• Improved risk assessment function
  • Enhanced list of conceivable threats and vulnerabilities
  • Improved management recommendation function for dealing with identified threats and vulnerabilities
  • Function to import or export information assets
  • Function to identify information assets in relation to operational work flows
  • Category search function for information assets


• Schedule
  • Management function for overall work schedule and individual work schedule
  • Incident response, audit status progress management function
  • Progress management function for Security Plan, a new requirement of ISO/IEC 27001


• Improved information security incident (security issue or accident) compliance
  • e-mail notification of security incident content (Information recorded on M@gicPolicyCoSMO by user regarding security incident is automatically sent to appropriate personnel)
  • Documentation and management function for security incident report and resolution action is compliant with requirements of ISO/IEC 27001


• To Do message function
  • Operator can deliver various commands related to information security (such as implementation of security patch etc.)


• Improved function for importing and exporting data
  • Various information such as user information, information asset, audit items can be imported and exported


• Improved data backup and restore function
  • Ability to choose from full backup or periodic backup


• Improved operability
  • Improved sort function for registered information and search function
  • GUI designed for day-to-day management


• Planned compliance with ISO/IEC 27001 and JIS Q 27001
  • Compliance with additional requirements, management plan, ledger sheet function etc

[Features]