FAQ

Go to your TrustOps Systems page, and select Add System on the top left of the page, next to the search bar.

Select Add System from your Systems page. Select the Third-Party Software and Cloud Services option, then open the dropdown and scroll down to the bottom of the list, selecting I don’t see my system here. Click Proceed, and then fill in information about your system. We will review the information and add the system to our catalog.

Adopted is a control that you have accepted as part of your compliance program and as part of the onboarding process.

Planned controls are controls that you have not accepted but have been suggested as potential controls for your compliance program.

All controls start in a planned stage until they are adopted. For the purpose of your audit, any controls that are adoped are considered in scope, and any controls that are planned are considered out of scope.

If there is a business justifiable reason as to why a test shouldn’t apply to you, you can exclude this test under Action for the test line item.

Please keep in mind that you will need to provide a reason prior to excluding the test, and it will be visible for your auditor.