With the advantage of Drata’s advanced automation capabilities, Kootek efficiently conducts a compliance gap analysis based on the selected compliance frameworks to identify gaps across your organisation. Services included-Scope  and customise compliance framework requirements and assign control owners (where applicable)

By quickly deploying Drata’s platform, your organisation can swiftly address identified gaps and achieve compliance objectives seamlessly.

Included Services:

• Build information security policies based on Drata’s policy categories
• Scope and customise compliance framework requirements and assign control owners (where applicable)
• Start with partner templates, refined through numerous successful audits.
• Establish all core policies that are outlined in Drata
• Review customer’s existing policies that are within Drata’s policy categories and advise on gaps.

Excluded Services:

• Combination of partner-created policies with customer policies
• Project manage to ensure every policy is approved and acknowledged by all customer personnel.
• Review customer’s existing policies that are outside the scope of Drata’s policy categories.
• Handle more than one iteration of review changes from customer.

We deliver essential documentation aligned with industry standards to ensure regulatory compliance. For SOC 2 customers , guidance will be provided for the customer through creating this necessary document, ensuring it meets all standards.

• We provide expertly crafted incident response and disaster recovery templates, tailored to your organisation’s specific needs and provide instructions for customers to facilitate the successful completion of these compulsory tests.

Excluded Services:

This program aims to ensure that you derive significant value from the Drata platform early in your journey. Although your implementation team is available to support your organisation beyond the 30-day Compliance Accelerator service, please note that this service does not encompass support for the following:

• Audit readiness for any compliance standard (i.e. SOC 2, ISO 27001, etc)
• Support on completing security assessment questionnaires (SAQ)
• Completion of a Disaster Recovery/Business Continuity Plan
• Representation as security or compliance team
• Building of custom frameworks or controls inside of Drata
• Migrations from another solution
• Editing current policies
• Employee onboarding / offboarding
• Completion of an Incident Response Plan or support in any actual security incidents