How Setyl Helps Organizations Prepare for ISO 27001, SOC 2 and Other Security Audits: Stories from Banked and Nourish
As an integrated IT asset management solution, Setyl supports organizations in achieving and maintaining compliance with standards like ISO 27001, SOC 2 and Cyber Essentials.
supports organizations in achieving and maintaining compliance with standards like ISO 27001, SOC 2 and Cyber Essentials.
From building a complete information asset register and centralizing audit evidence, to demonstrating compliance with access control processes, risk management, and other key audit requirements, here’s how two organizations — Nourish and Banked — are using Setyl for audit preparation and ongoing compliance.
How Nourish Prepares for ISO 27001 with Setyl
When health tech company Nourish doubled in size following an acquisition, its spreadsheet-based approach to IT asset and compliance management struggled to keep up. The process was labor-intensive, data was fragmented, and critical details were often missing.
This led the team to look for a solution that would streamline its asset management, even as it scaled.
Structured Information Asset Management for ISO 27001
To centralize its IT in a scalable way, Nourish implemented Setyl to serve as a single, integrated platform for asset and compliance management.
Setyl now provides:
- Full asset lifecycle tracking, from purchase to disposal, with complete change history and audit trails.
- Centralized documentation and certificate repository for instant audit evidence.
- Application and license management to map ownership, access and usage.
- Vendor due diligence via built-in audit questionnaires and recordkeeping.
- Automated onboarding and offboarding workflows to efficiently recover devices and manage the removal of access to software.
- Complete visibility across devices, users and software, including through integrations with Microsoft 365, Intune, and BambooHR.
There’s a real comfort in knowing that the information I’m seeing is accurate and reliable.
Continuous Audit Readiness and Confidence
With all asset, vendor, and application data consolidated and updated in one platform, Nourish can now easily locate information, implement controls and demonstrate compliance with key areas of ISO 27001 at any time, reducing manual effort and increasing confidence in the accuracy of its records.
Setyl will make audits so much easier. I can quickly locate any asset, see its history and access all related documents — even for assets we’ve disposed of. We’re also recording all vendor information into the platform. It brings so much visibility and efficiency. I no longer have to hunt for spreadsheets, worry about whether they’ve been updated, or scramble to piece together evidence.
How Banked Stays Audit-Ready with Setyl
For fintech company Banked, working with Tier 1 banking partners means undergoing frequent and detailed security audits. Meeting these standards required a formal approach to information security and IT asset management.
Complete IT Asset Inventory
After evaluating multiple IT asset management software, Banked selected Setyl for its modern interface, responsive support, and native integrations.
Using Setyl, Banked now benefits from:
- Centralized visibility over IT assets, SaaS applications and people.
- Native integrations with Jamf, Google Workspace, Microsoft 365, Intune and Personio HR to create and maintain a source of truth.
- Simplified employee onboarding, offboarding and asset transfers across locations.
- Audit-ready reporting to quickly produce lists of devices, operating systems, users, and locations.
- Over 25% reduction in SaaS spend thanks to a more structured approach to software and renewal management.
On-Demand Audit Reports
With Setyl, Banked can now instantly generate audit-ready reports, providing the detailed evidence required for its strict banking partners’ audits and Cyber Essentials certification.
It’s been fantastic to gain this visibility over all our IT assets, SaaS applications and people in one place. I now have peace of mind knowing that the information is readily available whenever needed, including for compliance and audit purposes.
Setyl’s Key Compliance and Audit Capabilities
Setyl simplifies the complex process of preparing for ISO 27001, SOC 2, and other security audits by serving as a centralized IT asset register and safeguarding platform.
It helps organizations easily implement essential policies and controls, and demonstrate compliance across several critical areas of security standards, including asset tracking, risk management, access control, change management, vendor management and documentation collection.
Setyl’s key features for audit preparation and IT safeguarding include:
- Comprehensive information asset register to centralize all hardware, software, users, and vendors.
- Full asset lifecycle tracking and itemized activity logs for verifiable audit trails.
- Shadow IT detection to identify unregistered devices and applications.
- Vendor management and due diligence workflows with built-in audit questionnaires.
- Access control and offboarding workflows for asset and access recovery.
- Logical deletion and compliant asset archiving workflows.
- Centralized documentation repository for policies, contracts, and certificates.
Learn more about Setyl’s compliance and IT safeguarding features.
About Setyl
Setyl is a leading IT asset and license management platform designed for midsize and larger companies across the globe.
The platform provides IT teams with complete visibility and control over their hardware assets, software licenses, usage and spend — including through 100+ native integrations with other IT and business systems.
By unifying asset data, automating key workflows and providing new insights, Setyl not only helps organizations prepare for security audits, maintain compliance, and reduce risk, but also improve efficiency, scalability, and cost control across their IT operations.