TrustyCyber

Services

Choose the assurance support you need.

TRUSTYCYBER provides evidence-led assurance services for cyber security and responsible AI. Engagements are scoped around the decision you need to support: certification readiness, internal audit, governance review, customer assurance, board reporting or AI assurance verification.

Check your fit →See how it works
ISO/IEC 27001 Lead Auditor
ISO/IEC 42001 Lead Auditor
JASANZ Technical Expert & Assessor
ASD IRAP Assessor

Current services

Choose the assessment that fits.

Each service answers the same four questions so you can decide quickly. More cyber and AI assessments will be added here over time.

ISO/IEC 27001

ISO/IEC 27001 Internal Audit

Independent internal audit of your information security management system against ISO/IEC 27001. Use this where you need evidence for certification readiness, surveillance, management review or customer assurance.

View service→

ISO/IEC 42001

ISO/IEC 42001 Internal Audit

Independent internal audit of your AI management system against ISO/IEC 42001. Use this where you need to test whether AI governance, risk, impact, lifecycle, oversight and operational controls are defined, operating and defensible.

View service→

AI Assurance Verification

AI Assurance Verification

Independent verification of the assurance supporting a specific AI system, AI agent or AI-enabled workflow. Use this where you need to test whether assurance evidence is current, scoped to the system actually in use, and consistent with available configuration records, responsibility allocations and operational evidence.

View service→

Good fit / Not a fit

Is this the right kind of work for you?

Good fit
Maturity
The system or control environment already exists
What you want
An audit or assessment, not implementation
Evidence
Evidence is mostly digital and can be shared
Delivery
A remote-first review suits the engagement
Not a fit
Maturity
The system is not built yet
What you want
Urgent rescue or remediation consulting
Evidence
Physical inspection is central to the work
Delivery
Special evidence handling must be agreed before starting

Compare

Different systems. The same assurance discipline.

ISO/IEC 27001
Management system
Information security management system
Typical objective
Internal assurance, audit programme coverage or certification preparation
Core evidence
Scope, SoA, risk treatment and operating controls
Outcome
Traceable findings and sequenced priorities
ISO/IEC 42001
Management system
AI management system
Typical objective
Internal assurance, governance confidence or certification preparation
Core evidence
Scope, SoA, AI risks, impacts and operating controls
Outcome
Traceable findings and sequenced priorities

Clear boundaries

What is not included.

Certification

TRUSTYCYBER does not issue certificates or make certification decisions.

Implementation within the audit

The audit does not include designing or implementing the system being assessed.

Automated conclusions

Technology may assist the analysis. It does not determine final findings.

Open-ended consulting

Each engagement has an agreed scope, criteria, method and deliverable.

Not sure which assessment applies?

The fit check takes about two minutes and asks for no documents.

Check your fit →