Question 1

Does TrustScope issue official NDPC compliance certification?

Accepted Answer

No. TrustScope is an evidence-led privacy readiness and cybersecurity assessment platform. It helps organizations understand their posture, connect evidence, and prioritize remediation. It does not replace the statutory authority of the Nigeria Data Protection Commission (NDPC) or grant third-party legal certification.

Question 2

What is the difference between Self-Attestation and Verified status in TrustScope?

Accepted Answer

Self-attested means a team member has marked a control as implemented without attached evidence. Verified status requires an administrator review backed by linked, traceable evidence references. Only verified controls contribute to the Verified Readiness score.

Question 3

What is Cross-Framework Control Credit in TrustScope?

Accepted Answer

TrustScope maintains over 260+ bidirectional control mappings between NDPA 2023, GAID 2025, CBN 2024, ISO/IEC 27001:2022, NIST CSF 2.0, and ISO/IEC 27701. When an assessor verifies evidence for a control in one framework, the engine automatically credits equivalent controls across other active frameworks, eliminating redundant audit duplication.

Question 4

How does TrustScope support the CBN 2024 Cybersecurity Framework?

Accepted Answer

For deposit money banks, payment service banks, and FinTechs, TrustScope provides automated mapping between technical security controls and the Central Bank of Nigeria (CBN) Cybersecurity Framework 2024, generating board reports, ISSC committee minutes, and CTI gap registers.