01
Initial discussion
we discuss the size of your firm, users, systems, locations and document handling. We agree the scope and assessment plan.
TrustGuard
TrustGuard: security assessment and programme level
We help protect client documents and the day-to-day work of your company. The TrustGuard programme combines reviews of IT safeguards and procedures, recommended improvements, training and periodic checks.
Trusted by
Companies and institutions that need stable IT.
Protecting data within your firm
The programme is designed for companies handling confidential client data, including audit firms, accounting practices and law firms. It covers your own company: its computers, documents, accounts and working practices. It does not replace the assessment of an audited entity’s IT under KSB 315. TrustGuard is Virtline’s own programme, not an external standard or accredited ISO certification.
Programme scope and related services
The scope covers technical safeguards and procedures for handling documents. We review how these measures are used, not just how they are described.
Cybersecurity
Computer protection, updates, access rights, email and multi-factor authentication (MFA). We also check encryption of laptops and removable media.Backup and data recovery
Backup locations, encryption and access controls. We check whether recovery tests are carried out, rather than simply whether backups exist.Dane Chronione programme
Data protection rules, GDPR documentation, staff responsibilities and incident handling. We consider how documents are shared with clients and suppliers.Services for statutory auditors
Training, remote work and access to documents outside the office. We establish who is responsible for implementing and reviewing the agreed safeguards.Three programme levels
SILVER, GOLD and PLATINUM have different requirements, not just different badges. We agree the scope for your firm before work begins.
Ask about SILVER
Antivirus protection, basic IT and GDPR procedures, backup, laptop encryption and 5 hours of training. The period covered by these hours and the participant group are confirmed before the offer.Ask about GOLD
The SILVER scope plus a further 5 hours of training, backups in two locations, risk analysis, periodic security work and a review of contracts with key suppliers. The period covered by these hours and the participant group are confirmed before the offer.Ask about PLATINUM
The GOLD scope plus a further 5 hours of training, encrypted backups in at least two locations and recovery tests twice a year. Includes centralised protection, risk analysis, procedures referencing NIS2 and ISO 27001, and periodic security tests. The IDS/IPS scope depends on your firm’s infrastructure.ISO 27001 · TÜV NORD Polska
Virtline’s information security management system is certified by TÜV NORD Polska. The published certificate specifies its scope and validity.
View Virtline’s certificateHow the TrustGuard programme runs
TrustGuard is Virtline’s own programme, not accredited ISO certification. Virtline provides the programme and performs the assessment. Before engagement we present the selected level’s criteria, scope, verification, oversight and mark-use rules. Advice and assessment are separated within the agreed scope; an awarded level concerns only the criteria checked.
02
Audit and recommendations
we review documentation and technical safeguards. We present the findings, gaps and the order of improvements.
03
Improvements and final assessment
after the agreed work, we check the requirements. We prepare the report and decision on the programme level.
04
Annual supervision
subsequent reviews revisit safeguards and procedures. We take account of changes and the tasks required to maintain the level.
Practical scope
What your firm receives
The materials describe the reviewed scope, findings and follow-up tasks. They do not confirm safeguards that were outside the review.
The checks performed, their findings and limitations, and the decision on the TrustGuard level.
Gaps to address, the order of work, agreed deadlines and the people responsible for carrying out the tasks.
Results of configuration, backup, access and procedure checks. Sharing materials with clients must not expose confidential technical details.
The scope of annual supervision and the next security review, taking account of changes to staff, systems and working practices.
SILVER level badge
The shield represents the SILVER level of TrustGuard. It is not an ISO certification mark. Terms for using the badge must be agreed within the programme.
Visual material
TrustGuard SILVER
Graphic representing the SILVER level of Virtline’s programme.
View the badgeQuestions about TrustGuard
Is TrustGuard an ISO 27001 certificate?
+
No. It is Virtline’s own programme for companies. The ISO 27001 certificate for Virtline’s management system is a separate document and does not grant ISO certification to a firm participating in TrustGuard.
How do we choose a programme level?
+
We start with your safeguards, working practices and requirements. We discuss the differences between SILVER, GOLD and PLATINUM and the work needed to meet the relevant scope. We do not assume that you need the highest level.
Does the programme include follow-up reviews?
+
Yes, it includes annual supervision. We check how safeguards and procedures work and what has changed since the previous assessment. The review scope and your firm’s responsibilities are agreed as part of our work together.
What should we prepare for the first discussion?
+
Useful information includes staff numbers, locations, computers, email, backups and remote work. Do not send passwords, client documents or detailed configurations through the form. We will agree a secure way to share them separately.
Let’s discuss your firm’s data protection
Tell us how many people work in your firm, which systems you use and how you store documents. Let us know whether you are starting to organise security or preparing for a follow-up review.
Ask about TrustGuard