Exonaut® is 4C Strategies’ market-leading readiness management software platform, comprising fully integrated solutions for Risk, Business Continuity, Crisis Management, Compliance, Training and Exercises. To meet the security demands of governments, critical infrastructure providers and the armed forces, Exonaut is accredited to NATO Secret level, Cyber Essentials Plus and the highest international standards.
As both a software company and management consultancy, 4C Strategies has a proven track record of delivering readiness solutions for mission critical environments. 4C’s software developers work closely with our subject matter experts to ensure that Exonaut drives innovation to meet customer needs and industry best practice. Exonaut is available on-premise, as a cloud-hosted solution, or with a hybrid option.
Exonaut in a Nutshell
An integrated platform for risk, business continuity, crisis and exercise management
Exonaut and Information Security
Learn about how we are keeping sensitive data safe and secure.
Exonaut® Exercise Planning and Programming SolutionDownload resource
4C Solution Brief: EEAS Consular Crisis ManagementDownload resource
4C Solution Brief – Experimentation & Trials ManagementDownload resource
4C Solution Brief: Nordic Bank Incident & Crisis ManagementDownload resource
Request a demonstration of our Exonaut software solutions for your risk, business continuity, crisis and exercise management needs.
What is Exonaut?
It is a software suite designed and built by 4C Strategies to provide all the tools you need to build, verify and track your organisational readiness (risk, compliance, incident, crisis, continuity and exercise management).
Who is Exonaut built for?
Exonaut® is designed to be used by risk managers, compliance officers, CSO:s, CISO:s and exercise managers to support them in their day to day operations. The reports and dashboards are meant to give senior level management an overview of the current readiness levels (risk exposure, compliance, training status, risks etc). Data capture interfaces are designed to support first line operators with limited or no domain knowledge, by using simple and clear interfaces. Second and thirds line assurance on the other hand has access to intuitive interfaces to slice and dice the data as appropriate for analytical purposes and to drive performance. All activities are supported by workflows and configurable notification rules to ensure that work is performed as intended.
How long does it take to implement Exonaut?
Most organisations that select Exonaut® have a clear idea on what they want to achieve. When all framework and policy questions have been taken care of (risk criteria model, control catalogue, types of incidents etc.), an implementation project can be as short as four to six weeks. Typically, in sizeable organisations, three to six months from project start to go live is normal.
Who needs to be involved from our side when buying Exonaut?
A typical implementation requires coordination between the main sponsor, usually a security, risk or compliance manager, with approval from senior management and supported by the internal IT department. This setup ensures a smooth implementation.
Is Exonaut a cloud solution or an on premise solution?
Both. Exonaut® is offered as both Software as a Service (cloud based) or as an installed solution. The pricing is the same, and the solution is the same, and it is simply a matter of adapting to your IT security requirements.
Is Exonaut available on mobile devices?
Yes. Exonaut® is fully supported with its native app for iOS, Android and Windows, called Observer. Observer allows users to access documents (on or offline), submit data via custom templates (eg. compliance checklists, evaluation criteria), use the interactive map function for geotagging information, and communicate in a secure, encrypted environment. The data submitted through the Observer app populates Exonaut dashboards in real-time, providing an accurate status overview for risk, compliance, incident and exercise management.
How secure is the information that you enter into Exonaut?
Exonaut® has its origins within the military domain, so information and IT-security has been the top priority since the start. The Suite has a number of accreditation including for use in NATO Secret and Unclassified networks. Within the system itself, each information item is governed by a granular permission model, ensuring that a logged in user will see exactly what he or she is supposed to, and no more or less. Outside the system, each customer can apply their own chosen level of security, such as specialised encryption solutions and VPN-tunnels. Finally, for extreme security requirements, the entire system can be run in a master/slave configuration, enabling a master server to be kept separated from any attack vectors (internet, airwaves, radio, signals), while selected parts of the configuration can be used in a more open environment for a limited time period. When the required data has been collected, it is then merged with the master server again, without exposing the aggregated data to the outside world at any point in time. The capabilities this provides while maintaining strict information security is found in no other systems in operation today.
How does Exonaut allow for compliance with the General Data Protection Regulation (GDPR)?
We are committed to protecting our customer’s data. This includes working hard to ensure that processing activities undertaken in Exonaut® comply with applicable data protection laws, such as the General Data Protection Regulation (GDPR).
Most of our customers choose to limit the personal information they process in the system to basic user identification data (such as names, e-mails and passwords) and can rely on our standard solutions for secure processing. Customers who wish to process other categories or types of personal data may need additional layers of security. We work closely with each customer to determine their specific needs with respect to data security, whether they choose our On-premises or SaaS solution. Please refer to “How secure is the information that you enter into Exonaut®?” for further information.
Exonaut®’s administrative tool-set allows for compliance with legal obligations relating to the rights of individuals (data subjects), such as deletion of and access to data.
Does Exonaut come with GIS support?
Yes. An important function in Exonaut® is the ability to work with interactive maps and geographic information, especially when dealing with exercises, incidents and crises management. Exonaut® is delivered with multiple map server interfaces to provide for the integration of advance GIS-support both in desktop and mobile applications (for both on- and off-line). Usually our clients with need for GIS functionality already host their own map servers. Thus, instead of creating a parallel GIS system, Exonaut® provides a greater ROI to any investment in a bundled geographic information system.
Can I integrate Exonaut with my current system?
Exonaut® has an API which can be used to feed or collect data from other systems. There are a number of standard integrations available for the most common user management (AD) tools, as well as business intelligence tools, military simulators and emergency dispatcher tools to name a few. In addition, if there is a need, unique integration plug-ins can easily be designed and deployed using our extensive integration framework.
What dashboards are available in Exonaut?
Each Exonaut® module comes with its own basic dashboard. However, if required, Exonaut® provides an integrated dashboard solution, enabling users to mix Exonaut® data from all modules in any way they request. It also provides intuitive drag-and-drop interfaces for designing any dashboard necessary. This is an optional extension. If you already have a BI strategy and tools in place, these can of course be used to extract data and create Readiness dashboards, via the Exonaut® API.
Does Exonaut come with an Emergency Roll Call function?
Exonaut’s “I Am Safe” Emergency Roll Call Solution enables organisations to notify their employees and monitor their safety status during an emergency, wherever they are located. Alerts are delivered as SMS or push notifications, with safety status displayed in live dashboards, maps and our native mobile application.