Security Audit Consulting

Audit Services

Audit of compliance against requirements for a variety of standards and defacto-standards.

  • FIPS-140
  • PKI-WebTrust
  • PKI-Gatekeeper
  • PKI-Queensland Government

Review Services

Review of compliance against requirements for a variety of standards and defacto-standards.

  • FIPS-140
  • PKI-WebTrust
  • PKI-Gatekeeper
  • PKI-Queensland Government

Note: Cryptsoft is not accredited to perform audit services directly under WebTrust, GateKeeper. Cryptsoft works in partnership with accredited audit firms if formal accreditation is required.




Cryptsoft is accredited to perform Queensland Government PKI Audits as of 31-Mar-2010 as a member of the QGPKI Panel under Whole of Government (WOG) Standing Offer Arrangement (SOA) - Public Key Infrastructure (PKI) Audit Panel - X.TEN.0213. Details for this panel are available on GOVNET (note: only works for Departments connected to GOVNET). The equivalent information (without details) is available to the PUBLIC.

Queensland Government Departments operating a PKI should refer to the GEA Position and Policy on PKI for more information about Department requirements for audit.

Note: pki.qld.gov.au is the main repository of PKI information for Queensland Government.

Note: The QGPKI Framework documentation update (approved August 2010) is available at http://qgcio.qld.gov.au/qgcio/architectureandstandards/qgea2.0/Pages/Technology.aspx

Other Audit Services

Reviews for the purposes of technical due diligence are provided under limited circumstances for select clients.

Find out more …