Getting started with Ciyora Comply

Ciyora Comply links platform activity to the controls in your frameworks.

1. Choose your frameworks. Ciyora's framework library includes SOC 2, ISO/IEC 27001, NIST, CIS, PCI DSS, HIPAA and GDPR, and an India regulatory pack (RBI, SEBI CSCRF, CERT-In, IRDAI and the DPDP Act). Your ZPOA contact can enable the ones you report against.
2. Run the controls. Evidence comes from the other modules: access reviews and SoD from Ciyora Fortress, posture results from Ciyora Armor, incidents from Ciyora Detect.
3. Generate reports under Governance > Reports, and export access review evidence packs from each campaign.
4. Keep the risk register current and link each risk to the controls that reduce it.
5. Verify the audit chain under Governance > Audit log before an audit.

Ciyora helps you operate and evidence controls; it does not certify your organization.