AssurIQ

Compliance

Evidence-first assurance, control states, frameworks and mappings.

  1. 1
    Evidence-First Assurance Model
    Universal controls, evidence mapped to many frameworks, and why missing evidence is not failure.
  2. 2
    Control States
    PASS, PARTIAL, FAIL, EVIDENCE GAP, NOT APPLICABLE and EXCEPTION — precise definitions.
  3. 3
    Assurance Confidence
    How evidence quality, freshness and source produce the confidence score.
  4. 4
    FTC Safeguards Overview
    Who it applies to, the nine elements, and how AssurIQ controls map to each.
  5. 5
    HIPAA Security Overview
    Administrative, physical and technical safeguards and the AssurIQ mapping approach.
  6. 6
    NIST CSF 2.0
    Govern, Identify, Protect, Detect, Respond, Recover and the AssurIQ crosswalk.
  7. 7
    Cyber Insurance Baseline
    Controls insurers most commonly attest and how to prove them.
  8. 8
    Framework Mappings
    Mapping strength, one-control-many-requirements leverage and coverage math.
  9. 9
    Framework Versioning
    Versioned packs, upgrades and how history is preserved.
  10. 10
    Scope and Applicability
    Marking controls not applicable, scoping by site or system class.
  11. 11
    Risk Acceptance
    Accepting residual risk with an owner, expiry and review.
  12. 12
    Auditor Access
    Scoped, read-only, time-limited access for assessors.