Four complete readiness reports, in the same format a client receives, and the evidence pack behind every finding. Follow any finding to the document it rests on and judge the rigour for yourself.
Prepared for Southern Mutual Bank, a fictional organisation. Its people and evidence are fictional too, created to show how the reports read. These are readiness assessments, not audits or certifications.
Information security readiness against APRA's prudential standard, control by control.
Readiness against the Trust Services Criteria, with the evidence behind every finding.
Clauses 4 to 10 and all 93 Annex A controls, ready for a certification conversation.
Readiness against the Australian Government ISM, laid out the way an IRAP report is.
Every document the four reports cite, so you can check any finding against its source.
Each report opens with a summary, then works through every control: what was found, the document it rests on, and what to collect next. Every document a report cites is in the pack, with its fingerprint, so any finding can be checked against its source.