Controls and evidence for regulated organizations
Regulators and auditors ask similar questions: who can access what, how you know when something is wrong, what you did about it, and how you can prove it. Ciyora answers them from one platform.
SOC 2
Logical access, system operations and change management evidence for the Trust Services Criteria your auditor tests.
Read moreHIPAA Security Rule
Technical safeguards for ePHI: access control, audit controls, integrity, authentication and transmission security.
Read morePCI DSS v4.0
Need-to-know access, strong authentication, logging and monitoring, and regular testing for the cardholder data environment.
Read moreNIST CSF 2.0 and CMMC
Govern, identify, protect, detect, respond and recover, and the NIST SP 800-171 requirements behind CMMC Level 2.
Read moreState privacy laws
Reasonable security, breach readiness and consumer requests under the CCPA as amended by the CPRA and other state laws.
Read moreISO/IEC 27001:2022
Annex A controls for access, privileged access, logging, monitoring, vulnerabilities, cloud services and incidents.
Read moreCiyora helps you meet requirements by operating controls and producing evidence. It does not certify an organization or make it compliant on its own; that judgement belongs to your auditors and regulators.
Working towards an audit or an inspection?
Tell us the framework and the deadline. We will show which controls Ciyora can run and evidence.