Skip to main content

Services · Supporting service

Certification Technical Readiness

The technical controls your ISO 27001 or SOC 2 auditor will test, implemented and evidenced alongside your compliance consultant. Certification is issued by independent auditors.

State
Available
Pricing
Fixed price after scoping

Fit

Who it is for, and when

Who it is for

Teams preparing for ISO 27001 or SOC 2 who need the technical controls done.

When to use it

  • An audit date is set
  • A customer requires a certification

Services · what our people do

What we do

We implement and evidence the technical controls alongside your compliance consultant. Certification is issued by independent auditors.

Scope

  • Technical controls your auditor will test
  • Evidence of those controls

How we work

Working together

What we need, and what you receive

What we need from you

  • The scope your compliance consultant or auditor has agreed
  • Read-only access to the environments in scope
  • Owners for the controls to be implemented

What you receive

  • Implemented technical controls
  • Evidence for your auditor

Boundaries

What this service does not include

  • Tricognita does not issue certifications or provide accreditation. Certification is issued by independent auditors.
  • This covers technical controls and their evidence. Your compliance programme stays with your compliance consultant.

ARIA

ARIA and this service

ARIA is being developed to support repeatable cloud-control remediation and verification within this workflow. It does not replace the engineering work.

Signed records and closure records help show what was checked and fixed. They are records, not audit opinions.

ARIA

Cloud control remediation and verification

Status
LaunchingIn development

ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.

Evaluate → Fix → Verify → Keep secure → Evidence

See ARIA

Coverage

Clouds and pricing

Clouds

AWS
Available
Microsoft Azure
Available
Google Cloud
Not covered

Pricing

Fixed price after scoping

Every engagement is scoped and priced in writing before work starts.

How pricing works

Talk to us about Certification Technical Readiness.

Tell us about your environment and what you need. You receive a written scope before any work starts.