Skip to content

Measures and evidence

Measures that protect you. And proof that they work.

You turn on MFA because account takeover is a real risk, not because a standard lists it. Trustbird records each measure with the risk it addresses, the person responsible and the evidence that it is in place. That same measure then counts for ISO 27001, NEN 7510, NIS2 and the GDPR.

Create your workspace Book a demo
  • Every measure linked to a risk
  • One piece of evidence, several obligations
  • Reminders before evidence expires

Measures anyone can follow

Customers, auditors and your board want to know three things: what you do, who does it and whether it is still true. Trustbird keeps those together for every measure.

Organizational, technical, procedural and physical

Record every kind of measure, from access reviews and backups to screening new employees and securing the office.

Linked to the risk it reduces

Every measure shows which risks it addresses, so it is clear why it exists and what happens if it stops.

A named owner

Each measure has a person responsible for carrying it out and keeping it current.

Evidence collected once

Attach evidence to a measure, or let Trustbird collect it from Microsoft 365 and Google Workspace. It counts for every requirement the measure supports.

Source and original date

Evidence keeps where it came from and when it was created, including after an import, so an auditor can follow its history.

Signals when something slips

Evidence that expires or a measure that has not been checked in time appears as an action for its owner.

How it works

  1. 01

    Start from your risks

    Trustbird suggests the measures that fit the risks you recorded.

  2. 02

    Assign owners

    Decide who carries out each measure and how often it is checked.

  3. 03

    Add evidence

    Upload a document, link an export or let a connection collect it automatically.

  4. 04

    See where you stand

    Per measure, per risk and per standard you see what is in place and what is still missing.

Frequently asked questions

How does one measure count for several standards?
Every measure is mapped to each requirement it supports, in every standard you carry. When you attach evidence to the measure, it shows up for all of those requirements.
Can Trustbird collect evidence automatically?
Yes, through connections with Microsoft 365 and Google Workspace. Evidence that cannot be collected automatically, you upload yourself.
Does the AI decide whether a measure is sufficient?
No. The AI can judge whether evidence appears to cover a requirement, but that judgement is advice with its own status. A named person decides.

Related

See what Trustbird does for your organization

Trustbird is being built with two certified design partners, and we are looking for more companies to join them. Apply as a design partner, or mail us with a question.

Create your workspace support@trustbird.com