Be ready when a customer or an auditor asks. We close the gaps, put the controls in place and keep the evidence current.
What you receive
- A gap analysis against the framework
- Controls and policies in place
- Evidence collected as systems run
- Support through the auditor's review
Works with
Okta
Auth0
GitHub
Frameworks / 02
Three frameworks,
one set of controls.
- 01
SOC 2
Security, availability, processing integrity, confidentiality and privacy, mapped to your systems.
- 02
ISO 27001
An information security management system: policies, risk register, incident and supplier management.
- 03
HIPAA
Administrative, physical and technical safeguards for health information, with a risk assessment.
Controls / 03
Controls that
run themselves.
- 01
Scanning in delivery
Code, dependencies and containers scanned before release.
- 02
Secrets management
Credentials kept in a vault, never in code.
- 03
Hardening
Servers, containers and clusters configured to recognised benchmarks.
- 04
Continuous evidence
Evidence gathered from your systems as they run, not assembled in a rush.
Our role
We prepare you for the audit. An independent auditor performs it and issues the report or certificate.
Audit on the calendar?
Tell us the framework and the date. We will say what it takes to be ready.
Security services