Choose the Verify™ Cybersecurity Risk Assessment and Receive the Official Statement of Trust™
Independent cybersecurity evidence that customers, insurers, boards and procurement teams can verify.
Standardized Cybersecurity Verification
Most organizations already have pieces of cybersecurity evidence: a SOC 2 report, ISO certificate, penetration test, vulnerability scan, policy set or customer questionnaire. The problem is not always a lack of evidence. It is knowing whether the evidence is current, relevant and sufficient for the claim being made.
Verify™ by Datarisk Canada is an annual cybersecurity risk assessment. It reviews the organization, scope, controls, testing and management practices, fills material gaps with current assessment or testing, and records what the evidence supports.
The Three Stages of the Verify™ Assessment
The assessment is managed through three stages.
Qualification
Confidential due diligence considers legitimacy, ethics, ownership and influence, operating history, incidents, auditability, verifiability and association risk. The result is Go or No-Go.
Verification
Datarisk reviews documents, interviews key people, assesses technical evidence and controls, and performs testing appropriate to the scope. The private outputs are the report, Roadmap for Remediation™ and RMS.
Attestation
When the evidence supports the conclusion, the organization receives a Statement of Trust™ and 12 months of support, including three quarterly Checkpoints and agreed re-verification or recurring testing.
Required Cybersecurity Evidence
- Governance, risk ownership, policies and security responsibilities.
- Identity, multi-factor authentication, privileged access and access reviews.
- Endpoints, cloud services, network controls, logging, monitoring and incident escalation.
- Vulnerability management, external scanning, application testing and penetration-test results.
- Incident response, tabletop exercises, backup protection, restoration testing and business continuity.
- Security-awareness training, policy enforcement and workforce readiness.
- Critical suppliers, cloud providers, outsourced IT and third-party risk.
- Past incidents, corrective action and existing SOC 2, ISO/IEC 27001, PCI DSS, NIST CSF or customer-audit evidence.
How a Risk Maturity Score (RMS) Tracks Cybersecurity Improvement?
Verification produces an RMS from 1 to 5. It summarizes demonstrated control effectiveness, policy enforcement, compliance management and security awareness within the reviewed scope. It is a management baseline, not a pass-fail badge or a promise that incidents cannot occur.
Earning the Official The Statement Of Trust™ Attestation
The Statement of Trust™ is the signed cybersecurity attestation available when the evidence supports the conclusion. It names the legal entity and scope, explains the basis of the work, records the RMS, material conditions and limitations, states the issue and expiry dates, and links to the authenticity record.
Printed certificate with a unique holographic authenticity seal.
Shareable PDF for insurers, lenders, customers, boards, procurement teams and RFPs.
LIVE BADGE
Clickable website badge that opens the current Statement of Trust™ or live verification record.
The attestation is supported for 12 months. Three quarterly Checkpoints address material changes, remediation progress and stakeholder questions. Recurring scanning, targeted testing and awareness training can be added when they strengthen the evidence.
Independent Verify™ Attestations Are Exclusively Available From
informatica.org
Cybersecurity risk assessment, security testing, control effectiveness, audit evidence and cyber-risk attestation.
managedprivacy.ca
Privacy impact assessment, privacy governance, safeguards, legal obligations and privacy attestation.
otsec.ca
Industrial and OT cybersecurity, cyber-physical resilience, supplier assurance and standards readiness.
Verify™ and Statement of Trust™ FAQ
Already have security evidence? Let us validate it. Need new evidence? Start a Verify™ cybersecurity assessment.
Validate Existing Evidence | Start a Verify™ Assessment | Talk to a Risk Advisor
