ClearMark

ClearMark is a compliance platform for the NZ health sector. Client staff self-assess against the 102-control framework — HISF, the NCSC's CS-CMM and the HIPC — attach evidence to each control and track remediation, while Bridge Point reviews, challenges and approves before reports go out. It replaces the Word checklist and the stale spreadsheet with a living, evidence-backed record.

Health providers have to prove their cyber-security posture against a stack of frameworks — the Health Information Security Framework, the NCSC's CS-CMM, the Health Information Privacy Code. Most do it the hard way: an engineer on site filling in a Word checklist once a year, evidence scattered across email and shared drives, remediation tracked in a spreadsheet that goes stale by March. There is no living picture between audits.

ClearMark turns that into a self-service platform. Client staff work through the 102 controls themselves, set a status on each, attach the evidence that backs it up, and watch a maturity score build as they go. Bridge Point's role shifts from data entry to oversight — reviewing submissions, challenging ratings, asking for better evidence, and approving the assessment before any report is generated.

Once approved, a board-ready report comes out in PDF or Word on demand, and a live dashboard is there to share with leadership or Health NZ at any time. Remediation tasks carry owners and due dates, with reminders before they slip. The compliance record stays current all year, not just at audit time.