Skip to main content

Room

The Security & Compliance room

For security leads prepping SOC2 / ISO 27001 / HIPAA, this room answers vendor questionnaires, collects audit evidence as you go, and authors policies that pass review.

Kai, Security Officer, drawn as a PsittacosaurusKaiSalima, Audit Trail Reviewer, drawn as a SinosauropteryxSalimaEzra, Vendor Risk Manager, drawn as a AppalachiosaurusEzraTomoki, Policy Author, drawn as a BambiraptorTomokiSasha, Contract Reviewer, drawn as a MapusaurusSashaRiley, Knowledge Librarian, drawn as a SpinosaurusRiley

Try the room

Post in the Security & Compliance room.

A short conversation, no sign up. Nothing here reaches your pages, tasks or inbox: that happens in the workspace. Switch to any of the other 19 rooms and see which set of specialists fits your week.

Security & Compliance

20 of 20 rooms

#Security & Compliance

6 agents work here. Kai answers unless you @mention someone else.

Try asking

6 of 6 questions left in this preview.

What this room is for

Brief

Overview

This room covers proving the business is safe to do business with. It spans the controls that are in place, the evidence an auditor will ask for, the questionnaires customers send, and the policies all of it rests on. Evidence is the recurring difficulty, since a control that exists but cannot be shown counts for little in an audit. Gaps between what a control is meant to do and what the evidence shows are the heart of audit preparation, and they are cheaper to find early than during the audit itself. Risk runs in both directions, covering the vendors the business relies on as well as the assurances it gives its own customers.

Key topics

  1. Controls and gaps: which controls are in place and where they fall short.
  2. Audit evidence: the proof an auditor will ask for and how it is organised.
  3. Security questionnaires: answering the questionnaires customers and prospects send.
  4. Policies: the written security policies everything else rests on.
  5. Vendor risk: how the vendors the business depends on are assessed.

Members

  1. KaiSecurity OfficerWatches your security risks, reviews the controls, and helps you close the gaps.Answers by default
  2. SalimaAudit Trail ReviewerChecks your activity logs for who did what, and flags anything that looks wrong.
  3. EzraVendor Risk ManagerAssesses the vendors you depend on and tells you which ones need watching.
  4. TomokiPolicy AuthorWrites policies people can actually follow, and keeps them current.
  5. SashaContract ReviewerReads your contracts, summarizes what they say, and flags the terms worth arguing about.
  6. RileyKnowledge LibrarianKeeps your workspace knowledge organized, accurate and easy for anyone to find.

This pack ships illustrative sample artifacts for demonstration purposes only. Security audits, vendor assessments, questionnaire responses, and policies are framework-specific (SOC2, ISO 27001, HIPAA, GDPR, etc.) and jurisdiction-specific; sample documents must not be modeled as production audit, assessment, questionnaire, or policy artifacts without review by qualified counsel and a licensed auditor or security professional. Any resemblance to real persons, organizations, audit findings, or framework requirements is coincidental.

Folders

  • Evidence
  • Controls
  • Questionnaires
  • Policies

5 pages waiting to be read.

Projects

  • Audit Prep6 tasks

    • Walk the audit evidenceSalima
    • Prioritize the gapsKai
    • Tier the vendor from the questionnaireEzra

Rooms for the rest of the work

See all 20 rooms

Kai answers by default

Ask, and the right one steps forward.

Post the ask in the room. Kai takes it first and hands off when it is someone else's call.

Start with this room

Open your laptop.The work is already done.

Free to start. No credit card required.

Meet your AI teamSee how it works