SBB Assurance Library  |  Independent illustrative profile — not published or certified by NSAA Security
SBB Assurance LibraryNSAA Security / Assurance Profile
NSAA SECURITY · SBB Assurance Library

Security services and controls

Publicly described cybersecurity services separated from unverified certification claims.

Company capabilities

Cybersecurity services

According to NSAA Security's public website, its services include risk assessment, third-party vendor management, compliance readiness, cloud security and cybersecurity program development.

These descriptions are company capability information, not verification that NSAA currently holds ISO or IRAP credentials.

Official NSAA Security website
Evidence boundaries

What is not established

  • Current accredited ISO 27001 certification
  • NIST-issued certification (no such certification program)
  • A completed independent IRAP assessment for a specified service
  • A verified assessor or accredited issuer
  • Control effectiveness beyond the scope of actual evidence
Do not infer certification from service offerings

Supporting customers with a standard is different from holding an organisation-level certificate or completing a service-specific assessment.