TrustyCyber

Independent assurance

Assurance that goes deeper than the scan.

Human-led, evidence-based engagements for cyber security and responsible AI: vendor reviews, solution assurance and ISO/IEC 27001 & 42001 internal audits. Scoped around the decision you need to support: certification readiness, governance review, customer assurance or board reporting.

Check your fit →See how it works
ISO/IEC 27001 Lead Auditor
ISO/IEC 42001 Lead Auditor
JASANZ Technical Expert & Assessor
ASD IRAP Assessor

Reviewing an AI-enabled supplier?

Start with a free, public-evidence AI Trust Scan before committing to a review.

Scan a vendor →

Assess a vendor

Review a supplier and the service it provides.

Before onboarding, renewal, material change or continued reliance.

Vendor Review

Vendor Cyber Security & AI Assurance Review

Independent review of a supplier and the service it provides, scoped to the decision you need to support: onboarding, renewal, continued use or material change.

View service→

Assure a solution

Examine the actual system, deployment or use case.

The deployment, architecture, configuration or use case being relied upon, not the supplier in the abstract.

AI Assurance Verification

AI Assurance Verification

Independent verification of the assurance supporting a specific AI system, AI agent or AI-enabled workflow. Use this where you need to test whether assurance evidence is current, scoped to the system actually in use, and consistent with available configuration records, responsibility allocations and operational evidence.

View service→

Audit a management system

Test whether the management system holds up.

Whether your ISMS, AIMS or integrated management system conforms, operates as intended and is ready for scrutiny.

ISO/IEC 27001

ISO/IEC 27001 Internal Audit

Independent internal audit of your information security management system against ISO/IEC 27001. Use this where you need evidence for certification readiness, surveillance, management review or customer assurance.

View service→

ISO/IEC 42001

ISO/IEC 42001 Internal Audit

Independent internal audit of your AI management system against ISO/IEC 42001. Use this where you need to test whether AI governance, risk, impact, lifecycle, oversight and operational controls are defined, operating and defensible.

View service→

Good fit / Not a fit

Is this the right kind of work for you?

Good fit
Maturity
The system or control environment already exists
What you want
An audit or assessment, not implementation
Evidence
Evidence is mostly digital and can be shared
Delivery
A remote-first review suits the engagement
Not a fit
Maturity
The system is not built yet
What you want
Urgent rescue or remediation consulting
Evidence
Physical inspection is central to the work
Delivery
Special evidence handling must be agreed before starting

Compare

Different systems. The same assurance discipline.

ISO/IEC 27001
Management system
Information security management system
Typical objective
Internal assurance, audit programme coverage or certification preparation
Core evidence
Scope, SoA, risk treatment and operating controls
Outcome
Traceable findings and sequenced priorities
ISO/IEC 42001
Management system
AI management system
Typical objective
Internal assurance, governance confidence or certification preparation
Core evidence
Scope, SoA, AI risks, impacts and operating controls
Outcome
Traceable findings and sequenced priorities

Clear boundaries

What is not included.

Certification

TRUSTYCYBER does not issue certificates or make certification decisions.

Implementation within the audit

The audit does not include designing or implementing the system being assessed.

Automated conclusions

Technology may assist the analysis. It does not determine final findings.

Open-ended consulting

Each engagement has an agreed scope, criteria, method and deliverable.

Not sure which assessment applies?

The fit check takes about two minutes and asks for no documents.

Check your fit →