Simulations, role-based training and certificates for South African
financial institutions and POPIA-regulated businesses, with evidence
filed to Joint Standard 2 and POPIA controls.
Request a
demonstration · See the GRCLens
South Africa page
Who this is for in South
Africa
Organisations in Johannesburg, Cape Town and Durban that must show a
regulator or auditor that staff awareness is tested, trained and
recorded: FSCA and Prudential Authority regulated banks, insurers and
retirement funds, and any responsible party under POPIA, including
healthcare, retail and the public sector.
Which South
Africa frameworks PhishLens evidences
PhishLens runs on the shared control model of GRCLens, so evidence
captured once is mapped to every framework you are assessed against. In
South Africa that means:
| Framework | Awareness and training requirement it evidences |
|---|---|
| FSCA and SARB Joint Standard 2 (cybersecurity and cyber resilience) | staff awareness and training for financial institutions |
| POPIA | security safeguards and training for responsible parties and operators |
| ISO 27001:2022 A.6.3 | information security awareness, education and training |
| ISO 27001:2022 | A.6.3 information security awareness, education and training |
Built for South Africa
South African financial institutions now carry Joint Standard 2
obligations alongside POPIA, and both expect proof that staff are
trained and tested. PhishLens captures the evidence once and GRCLens
maps it to both. Security Solution Consultants is appointing South
African distributors and exhibits at the GPRC Summit Africa in
Johannesburg.
What PhishLens does, in brief
For a South African institution, PhishLens delivers simulations, role-based courses, the governance dashboard, the operations queues, a KPI scorecard, certificates and dated evidence against Joint Standard 2 or POPIA, hosted in country if required. The PhishLens product page covers every feature.
Frequently asked questions
Does PhishLens support
Joint Standard 2?
Yes. GRCLens holds the FSCA and SARB Joint Standard 2 and PhishLens
files awareness and training evidence against its requirements.
Does it help with POPIA?
Yes. Training completion and policy acknowledgement records evidence
the security safeguards POPIA requires of responsible parties.
Can we buy through a local
partner?
Yes. We are appointing South African distributors and can introduce
you.
Is data hosted in South
Africa?
GRCLens deploys on premise or in the hosting region you choose, so
data can stay in country.
Talk to us about PhishLens
Request a demonstration and we will run a baseline simulation design
for your organisation, show the executive dashboard with demo data, and
map the evidence to the frameworks you are assessed against.
This page is about the staff awareness and phishing simulation programme. For GRCLens platform coverage of South African regulation, see GRCLens in South Africa.
Request a
demonstration · Explore
the GRCLens platform · On-premise
deployment
