HiScoutWebsite

HiScout has established itself as a leader in Governance, Risk Management, and Compliance (GRC) software for over 15 years, serving an extensive range of federal and state authorities, as well as private sector companies. The software suite is specifically designed to manage IT Grundschutz, Information Security Management, Business Continuity Management, and Data Protection Management.

The platform simplifies and automates these complex processes, aiding in the compliance with the latest BSI guidelines and ISO standards. HiScout provides a unified generic data platform that supports all GRC tools, incorporating customized workflows and innovative Questionnaire technology to facilitate decentralized data collection. This comprehensive approach significantly relieves the workload of process owners and domain experts.

My contributions at HiScout focused on customizing the GRC suite and developing specialized tools that enabled significant version upgrades. This work aimed at enhancing functionality and user experience, aligning with HiScout's commitment to streamlining security and compliance management systems.

At HiScout, a critical challenge was the inability to upgrade directly from an older version to a significantly newer version of the GRC Suite using the standard update process. This limitation hindered the adoption of new features and compliance with updated security standards.

To overcome this, I played a pivotal role in the backend development of a WPF tool designed to facilitate major version upgrades. My primary responsibility was developing the transformation logic that allowed data from older instances to be adapted and integrated into the newer system architecture of the GRC Suite.

I collaborated closely with a colleague who managed the frontend aspects of the tool. Together, we created a solution that ensured data integrity and compatibility across software versions. By the time I left after two months, the tool had been successfully tested and was confirmed to be functioning effectively, although it had not yet been deployed into production.