ARIA and Integrated IT Support meet enterprise procurement requirements across ISO 27001, SOC 2, PIPEDA, and GDPR Article 22. Below are our current posture, self-assessment tools, and policy disclosures.
Track readiness across Common Criteria (CC1-CC9) + Availability, Confidentiality, Processing Integrity, Privacy. Progress saved locally. Export when engaging an auditor.
Walk through Annex A controls: organizational (A.5), people (A.6), physical (A.7), technological (A.8). Score tracked per domain.
Personal Information Protection and Electronic Documents Act self-assessment for Canadian organizations. 10 fair information principles.
What ARIA decides automatically, what it doesn't, your rights under GDPR Article 22 and PIPEDA, opt-out path, model disclosure, audit logging.
For SIG-Full, vendor risk questionnaires, DPAs, or a Type II report scoped to your procurement timeline: email ahmad.wasee@iisupp.net or book a 15-min call at iisupp.net/book.