SBB Assurance Library  |  Independent illustrative profile — not published or certified by NSAA Security
SBB Assurance LibraryNSAA Security / Assurance Profile
NSAA SECURITY · SBB Assurance Library

Assurance overview

Three distinct types of security assurance and their verification boundaries.

Evidence status

Certification and assessment distinctions

How to interpret the three topics without treating alignment as certification.

FrameworkWhat can be claimedRecord statusDocument
ISO/IEC 27001:2022Certifiable ISMS standard; actual certification requires issuer verification.ILLUSTRATIVE / NOT VALIDOpen PDF
NIST Cybersecurity Framework 2.0Framework alignment only; NIST does not provide CSF certification.SELF-DESCRIBED / UNVERIFIED
IRAP / Australian ISMSecurity assessment process; an IRAP assessment does not certify or accredit a system.ASSESSMENT NOT VERIFIEDOpen PDF
These are not issued credentials

No accreditation body, assessor identity, certificate register lookup or audit sign-off is asserted. The dates are illustrative fields for evidence interpretation only.