Custofaber Guard / Guard Comply
Compliance
The Guide's 660 measures, in a single table.
Guard Comply tracks compliance with Türkiye's Information and Communication Security Guide v1.1 and ISO 27001 on your organisation's server. Which measures are in place, which are missing, where the evidence is, what you will show the auditor: all in one place.
It follows the Guide's own method.
Comply turns the implementation process described in the Guide's Annex C into software, step for step. You do not learn a new method; you do what you already have to do, consistently.
Criticality and scope
Defines your asset groups, runs the criticality rating questionnaire and determines which measures apply to you.
A criticality level and a list of applicable measures for each asset group.
Gap analysis and roadmap
Assesses the current state measure by measure, lists the gaps and ties them to a roadmap. Records compensating controls for measures that cannot be applied.
Missing measures, responsible unit, target date and compensating control.
Evidence and audit report
Maps policy documents, screenshots and logs to the relevant measure. Prepares an orderly report for the audit, with a cross-mapping to ISO 27001 controls.
Evidence files per measure and an audit-ready report.
Four steps from scope to report.
In the first three, Comply keeps things in order; in the fourth, you present the report.
-
Set the scope
Enter asset groups and criticality levels. Comply produces the list of applicable measures.
-
Assess the measures
A status for each measure: in place, partial, not in place, compensating control.
-
Attach evidence
Attach the document, screenshot or log to the relevant measure. Missing evidence is listed.
-
You present the report
Comply prepares the audit report; your team presents and defends it to the auditor. Every change is on record.
It does not issue certificates.
An ISO 27001 certificate is issued by an accredited certification body after its own audit. Comply makes it easier to prepare for that audit.
It does not replace the auditor.
You decide whether measures are in place; Comply keeps the record in order, sends reminders and reports.
It sends no data outside.
Your policies, evidence and assessments stay on your organisation's server.
Guard Comply FAQ.
Do we have to assess all 660 measures in the Guide?
No. The Guide's own method determines the applicable measures from the criticality level of your asset groups. Comply narrows the list using the Annex C.1 and C.2 steps.
Can we track ISO 27001 and the Guide at the same time?
Yes. The same evidence is linked to the relevant clause in both frameworks; you do not keep two separate files.
Where is evidence stored?
On your organisation's server. Access depends on permissions and every access is recorded.
Will Guard Comply get us certified?
Comply makes it easier to prepare for the audit. The certificate is issued by an accredited certification body.
See Comply with your own scope.
Tell us your asset groups and which frameworks you follow; we will build the demo around your scope.