ENGAGEMENT FIT CHECK
Is this assurance approach right for your organisation?
Answer a few questions about the service, scope, management system, evidence readiness and timing. You will receive a preliminary indication of fit. No files or audit evidence are requested at this stage.
What the fit check considers.
Alongside service- and framework-specific questions, the fit check looks at whether the structured evidence workflow suits your situation:
- whether relevant evidence is available digitally;
- whether evidence can be provided through an approved Microsoft 365 workspace;
- whether key records and control outputs are documented;
- whether the organisation can use an asynchronous evidence workflow;
- whether the scope requires physical inspection;
- whether live demonstrations are likely to be available if required;
- whether the engagement involves classified or specially controlled information; and
- the report completion date required.
A demonstration or interview may still be needed; that alone does not make an engagement unsuitable. Heavily physical, classified, unusually complex or time-critical scopes are routed to manual review.
POSSIBLE RESULTS
Likely fit
The engagement appears suitable based on the information provided.
Preparation needed
Some foundations should be completed before an internal audit will be useful.
Manual review required
Classification, jurisdiction, complexity, independence or handling requirements need discussion.
Outside current scope
The requested work is not a service TRUSTYCYBER currently provides.
What happens after a result.
This is a preliminary result, not acceptance of an engagement.
If you submit your details, TRUSTYCYBER will review the proposed scope, independence, evidence requirements, timing and information-handling needs.
If the engagement is accepted, you will receive confirmed scope, engagement terms and a payment link. A 50% deposit then secures the engagement and releases the evidence workflow.
The online fit check is being prepared.
In the meantime, contact TRUSTYCYBER with the service you are considering, your management-system scope, current certification status and preferred timing.