Trust Centre
Security questionnaires
Our answers to the CSA CAIQ, the ISO/IEC 27001 Statement of Applicability, ASD's Essentials for cloud and Information Security Manual, and APRA CPS 234 and CPS 230, sent to customers and prospective customers on request.
What we can send you
We keep one register of our security controls, and answer the frameworks Australian buyers ask about from it. Each answer says whether a requirement is in place, partly in place or planned, how Pyron meets it, and what is yours to do.
- CSA CAIQ v4.1. The Cloud Security Alliance's Consensus Assessments Initiative Questionnaire, all 283 questions.
- ISO/IEC 27001:2022 Statement of Applicability. All 93 Annex A controls.
- ASD's Essentials for cloud. All 78 actions, each marked as ours, yours or shared.
- ASD's Information Security Manual. The controls a cloud service is assessed on.
- APRA CPS 234 and CPS 230. A response pack for entities APRA regulates.
How to ask
Write to security@pyron.io, or to your usual Techly contact, and say which you need. We send them as spreadsheets, to the people evaluating Pyron for your organisation.
What they are not
They are our own answers, not an audit or a certification. Pyron holds no security certification yet: What we don't have yet.