Assurance

The word distinguishes proof from assertion. A policy asserts; an assurance activity examines whether the policy is followed and produces evidence a third party can rely on. Assurance is what customers, insurers, regulators and boards actually want when they ask about security, and it differs from implementation (building the control) and from operations (running it). The party giving assurance should have no role in either.

Assurance is the discipline behind every security service we offer, from Cyber Assurance to the evidence standard applied to our own published pages.

• Independent assurance
• Control validation
• Evidence
• Audit readiness