Free tool · 2 minutes, no call

Audit readiness score.

Eight quick questions about how you run security today. You’ll get a score, where you stand on SOC 2 and ISO 27001, and the gaps to close first.

0 of 8 answered

01Is SSO enforced across your core tools?

Yes. Everyone signs in through SSO.Partly. Some tools use SSO, others have separate logins.No. People sign in to each tool on its own.

02Is access to your production systems logged and reviewed?

Yes. Access is logged and reviewed on a schedule.It's logged, but we rarely review it.No. We don't log or review it.

03Do you have a written information security policy?

Yes. It's written, approved and shared with the team.It's drafted, but not approved or rolled out yet.No. Nothing is written down.

04Do you have a security review process for vendors and sub-processors?

Yes. Every vendor is reviewed before we onboard them.Only for some vendors, and it's informal.No. We don't review vendors.

05Do you have a documented incident response plan?

Yes. It's documented and we've tested it.It's documented, but we've never tested it.No. We'd work it out when something happens.

06Is there a formal review process for code and infrastructure changes before they deploy?

Yes. Every change is reviewed and approved first.Some changes are reviewed, not all of them.No. Changes go straight to production.

07Is customer data encrypted at rest and in transit?

Yes, both at rest and in transit.In transit only, or only some data is encrypted at rest.No, or we're not sure.

08How would you produce evidence for an auditor right now?

From our systems, in minutes. Collection is automated.We'd gather it by hand over days or weeks.We wouldn't know where to start.

Making companies digitally resilient by default.

Made in India