Since working on a spreadsheet, you and your team have come a long way. You’re enjoying the ease of working in TrustOps because it automates control mapping, test creation, and evidence workflows. However, you’re looking for ways to save a bit more time, so you can focus on your day job and growing list of priorities.
Collecting evidence to validate compliance controls takes time and affects HR, IT, DevOps, and the rest of your team’s productivity. You are always looking for innovative ways to control validation.
That’s where TrustOps comes in to lend a helping hand.
How We Solved Your Challenge:
In addition to the automation already built in TrustOps, we’re also developing integrations with vendors that support API-based validation. This is an ever-expanding list, and we’re constantly adding new integrations to our catalog in TrustOps to make your job easier!
With this update, TrustCloud can collect evidence from the following systems through automated tests and use the results to validate controls in your compliance program:
The Buildkite integration provides two new notable inventories:
- CI/CD projects (or pipelines)
- User access listing
These inventories can be used as evidence for the following controls:
- Change management tooling
- Production deployment access
- User access review
The new Atlassian Bitbucket integration automates testing and evidence collection for controls, including:
- Single sign-on
- Multi-factor authentication
- Audit logging
- Logging of administrative actions
The integration also provides an inventory of source code repositories that can be used as evidence.
The new Freshteam integration provides one new pivotal inventory:
This inventory can be used as evidence for various HR-related controls.
The new JumpCloud integration automates testing and evidence collection for controls such as the following:
- Asset inventory
- Asset types
- Workstations – OS
The integration also provides one new inventory:
- IT Assets
Value to You:
By connecting TrustOps to the systems outlined above, you will:
- Save valuable time in building out your security and privacy program because you won’t have to manually add tests and evidence to the systems in your program.
- Receive automatic reminders when evidence needs to be updated to ensure that you’re adhering to your obligations.
Stay tuned over the next few weeks as we release more API-based integrations.
If you have any questions about our new integrations or the setup process, email us at [email protected].