FAQ

1. Go to your TrustOps program.
2. Click on “Programs” from the left-hand side menu and select “Systems.”.
3. Click on the “+ Add System” button.

To learn more about systems, visit TrustOps Systems.

1. Go to your TrustOps program.
2. Click on “Programs” from the left-hand side menu and select “Systems.”.
3. Click on “+ Add System” button.
4. Select the “Third-Party Software and Cloud Services” option.
5. Select “I don’t see my system here.”
6. Click on the “Proceed” button.
7. Fill in information like system name, purpose, website, and comments.
8. After reviewing the information, click on the “Send Request” button.

To learn more about systems, visit TrustOps Systems.

Adopted controls are controls that you have accepted as part of your compliance program and the onboarding process.

The planned controls are controls that you have not accepted but are suggested as potential controls for your compliance program.

All controls start at a planned stage until they are adopted. For the purpose of your audit, any controls that are adopted are considered in scope, and any controls that are planned are considered out of scope.

If there is a business-justifiable reason as to why a test shouldn’t apply to you, you can exclude this test under Action for the test line item.

Please keep in mind that you will need to provide a reason prior to excluding the test, and it will be visible to your auditor.