One set of controls for every framework
No more spreadsheets per framework. Controls, policies and documents live in one place, linked to every requirement they meet.
Change a control once. Everything follows.
Evidence
What proves each control, and how far each one is from collecting itself.
112
Satisfied and current
11
Failing collection
23
Expiring within 30 days
22
Never collected
68 of 168 collect themselves
A hundred need a person every cycle. Twenty-two of those could stop needing one today — you already run on AWS.
- EV-041Encryption at restCloud infrastructure · CryptographyAWS · APIFailing2 of 12 databasesPCI DSS · 31 daysCloud teamView
- EV-033Container encryption settingsEngineering · CryptographyManual · ScreenshotNever collectedNo record existsPCI DSS · 31 daysUnassignedUpload
- EV-052Backup retention configurationInfrastructure · ResilienceThiqa.collectorPartial3 of 5 capturedISO 27001 · 24 daysA. FathyCapture
- EV-002Network architecture diagramGRC · Scoping · RegisterManual by nature · RegisterNeeds review3 of 5 checksISO 27001 · 24 daysGRC teamView
- EV-061TLS versionCloud infrastructure · NetworkAWS · APIFailing1 of 4 balancersNot blockingCloud teamView
- EV-007Security committee minutesGRC · Governance · QuarterlyManual by nature · RecordGap foundQ2 quorum sign-offNot blockingGRC teamUpload
- EV-018Quarterly access review exportHuman resources · Access reviewsWebhook · CustomCollectedCurrentNot blockingHR teamView
In a spreadsheet a control is just a row. In Thiqa it carries its policy, its evidence and every framework it meets, so one change shows up everywhere.
Each control carries its policy, evidence and frameworks, so one change shows up everywhere.
Works with PCI DSS v4.0ISO 27001CBEAgentEvidence
Compliance FAQ
From the evidence, not by hand. A control without current evidence can’t show as compliant.
Yes. Each control is linked to every requirement it meets, so evidence collected once counts everywhere.