trio.so
ISO 27001

ISO 27001 compliance for every device you manage

ISO 27001 asks you to protect the information on every laptop and phone your team uses. trio.so enforces the Annex A controls that land on those devices, checks that they stay on, and keeps the evidence your auditor asks for. It covers Windows, macOS, Linux, iOS/iPadOS and Android from one console.

Start free trialBook a demo
  • Regional Leader, EMEA, Spring 2025
  • Easiest To Do Business With, Mid-Market, Spring 2025
  • Momentum Leader, Spring 2025
  • High Performer, Middle East, Spring 2025
  • Best Support, Mid-Market, Spring 2025

Rated 4.8 on G2

Endpoint compliance  ›  Frameworks  ›  ISO/IEC 27001
  • Disk encryption is enabledCTL-ENC-01A.8.24
    critical9 devices
  • Firewall is onCTL-FW-01A.8.9
    high0 devices
  • Passcode is requiredCTL-PWD-01A.8.5
    high5 devices
  • Real-time protection is onCTL-AM-01A.8.7
    high3 devices
  • OS version meets minimumCTL-PAT-01A.8.8
    medium8 devices
Configuration policyFirewall · Windows and macOS
Resolved
Resolved after next evaluation
Audit trail

09:42Trio · Finding resolved · Firewall is on (A.8.9) · open → resolved after next evaluation · 6 devices

  • Diyar Private Academy
  • Wires & Fabriks
  • Corvuss American Academy
  • Arabi Company W.L.L.
  • Loglass
  • Skill Authority
  • Bright Learners
  • Synonym
  • Trell

Annex A covers every endpoint

Your ISMS sets the rules. Annex A then expects them in force on every laptop, desktop and phone, including the ones people take home. At every audit, someone asks how you know.

  • Endpoints are in scopeA.8.1 asks you to protect information stored on, processed by or reached through user endpoint devices.
  • Devices leave the officeRemote working and assets off premises are covered too, in A.6.7 and A.7.9.
  • Settings driftA setting changed for one quick task can stay changed for months.
  • Proof every yearSurveillance audits check that your controls kept working since the last visit.
A lost device locked and wiped remotely

How it works

How ISO 27001 checks work in trio.so

An ISMS usually tracks device controls in a spreadsheet that goes stale between audits. With trio.so the checks run on a schedule, so the record stays current all year.

  1. Activate Annex A checksTurn on the ISO/IEC 27001 framework for Windows, macOS, Linux, iOS/iPadOS and Android.
  2. Review what failsFindings group failing devices under each Annex A control, ranked by impact.
  3. Correct and recordCorrect the setting with a policy. The next check verifies it, and the audit trail keeps the record for your next audit.
Start free trialBook a demo

Annex A

Annex A controls trio.so helps you meet

Most of Annex A covers your organization, people and premises. These are the controls that land on your devices, how trio.so helps, and where the evidence lives.

Annex A controlHow trio.so helpsEvidence in trio.so
A.5.9Inventory of information and other associated assets

Lists each device's owner, serial number, OS and installed apps.

The device list as a CSV export.

A.8.1User endpoint devices

Applies passcode, encryption and Wi-Fi policies to every enrolled device. Personal Android phones can use a work profile that keeps work data separate.

Whether each policy is applied, failed or pending on every endpoint.

A.8.5Secure authentication

Passcode policies set minimum length, auto-lock time and lockout after failed attempts. A check confirms screen lock is on.

Each device's screen lock result next to its passcode policy status.

A.8.7Protection against malware

Checks that anti-malware is active on each computer and shows Microsoft Defender for Endpoint alerts per device.

Anti-malware results per device, alongside any Defender alerts.

A.8.8Management of technical vulnerabilities

Ranks vulnerabilities by CVSS, EPSS and the KEV list, then patches the OS and third party apps on your schedule.

The patch history: each job, the devices it reached and the result.

A.8.9Configuration management

Applies security settings as managed policies and checks every device against the framework's controls.

Open findings under each Annex A control, with the devices affected.

A.8.24 · A.7.10Cryptography and storage media

Enforces BitLocker, FileVault and Linux disk encryption, and blocks USB storage on Windows and Linux.

Encryption check results and policy status for each device.

Control numbers and names from ISO/IEC 27001:2022, Annex A.

Controls

Enforce ISO 27001 controls on every device

Annex A expects your rules in force on each endpoint. trio.so applies them as policies and shows, device by device, where each one is applied, failed or pending.

  • CryptographyBitLocker on Windows, FileVault on macOS and disk encryption on Linux, for A.8.24.
  • AuthenticationPasscode length, auto-lock and lockout after failed attempts, for A.8.5.
  • Storage mediaUSB storage blocked on Windows and Linux, for A.7.10.
  • Wi-FiWPA2 or WPA3 Wi-Fi policies for every laptop and phone.

Remediation

Track corrections and keep the record

ISO 27001 expects problems to be corrected and the correction recorded. trio.so does both for the controls on your devices.

  • Correct with policiesPolicies set the failing control again on the affected devices, such as disk encryption or the firewall.
  • Verified, not assumedThe finding closes only after the next evaluation passes on that device.
  • Exceptions with an end dateAn exception covers one control on one device and expires, so it comes back for review.
  • Ready for surveillance auditsThe audit trail shows every framework change, evaluation and resolved finding since your last audit.
A laptop failing a check, the setting fixed, and the laptop passing on the next check

See your ISO 27001 findings in a free trial

Start a free trial, enroll a few devices and activate ISO 27001. The first evaluation shows where your endpoints already meet Annex A.

Start free trialBook a demo
5
platforms, Linux included
$5
Plans start at $5 per device.
14 days
free trial, no credit card
24/5
support from our team
Monday to Friday

Every OS

ISO 27001 checks on every platform

Your Statement of Applicability should match what you can enforce. This is the check depth on each operating system.

  • Windows
  • macOS

Windows and macOS

Encryption (BitLocker or FileVault), firewall, Secure Boot, OS updates and anti-malware on both, plus screen lock on macOS. Every policy reports its status too.

  • Linux

Linux

Signals for disk encryption, firewall and OS updates, plus the status of core policies.

  • iOS/iPadOS
  • Android

iOS/iPadOS and Android

Whether passcode, encryption and other policies are applied on each phone and tablet. Android work profiles cover personal phones.

Evidence

Evidence for your ISO 27001 auditor

Certification and surveillance audits ask you to show that a control works, not only that it appears in your Statement of Applicability. trio.so keeps that record as it works.

  • Asset inventoryDevices with owner, serial number, OS and installed apps, exportable as CSV, for A.5.9.
  • Control status by devicePass or fail for each mapped Annex A control.
  • Evidence recordsThe source, time and freshness of each check result.
  • Resolved findingsEach correction, verified on the next check, device by device.
  • Vulnerability handlingPatch jobs, the devices they reached and the outcome, for A.8.8.
  • Console accessMembers and their roles, exportable as CSV.

Why trio.so

Compliance checks in the same console as your devices

Your ISMS needs proof that controls operate. trio.so produces it from the console that enforces them, so there is no separate spreadsheet to keep in sync.

  • Proof from the console

    The same console sets each policy, checks it and records the result.

  • Pricing you can read

    Plans start at $5 per device. Endpoint compliance is in the Secure plan and above.

  • Rated 4.8 on G2

    Support from real people 24 hours a day, Monday to Friday.

Related

Related compliance features

ISO 27001 shares most of its device controls with other frameworks in trio.so.

Integrations

Works with the tools you already use

Send device results to Vanta to track the rest of your ISMS, see Microsoft Defender for Endpoint alerts per device, stream events to Splunk, notify your team in Slack or Microsoft Teams, and sync users from Microsoft Entra ID or Okta.

  • Vanta
  • Microsoft Defender
  • Splunk
  • Slack
  • Microsoft Teams
  • Microsoft Entra ID
  • Okta

ISO 27001 FAQ

No tool can do that on its own. An accredited certification body audits your information security management system and issues the certificate. trio.so helps with the Annex A controls that land on your devices: it enforces the settings, checks them and keeps the evidence. Your risk assessment, Statement of Applicability, policies and the audit itself stay with you.

Yes. The current edition is ISO/IEC 27001:2022, and trio.so maps its device checks to its Annex A. The transition from the 2013 version ended on 31 October 2025. Our ISO 27001 checklist walks through the clauses and Annex A.

The ones that touch devices: A.5.9 inventory, A.8.1 user endpoint devices, A.8.5 secure authentication, A.8.7 malware, A.8.8 technical vulnerabilities, A.8.9 configuration, A.8.24 cryptography and A.7.10 storage media. Organizational, people and physical controls are mostly outside device management.

ISO 27001 certifies your management system against an international standard. SOC 2 is a CPA firm's report on your controls, common with US customers. The device controls overlap heavily, so the same checks in trio.so serve both. See ISO 27001 vs SOC 2.

They answer different needs. ISO 27001 is a certifiable international standard. NIST frameworks such as SP 800-53 and SP 800-171 are US government guidance, often required by federal contracts. trio.so has frameworks for both, built on the same device checks. See NIST vs ISO.

It depends on your scope, how much is already in place and the certification body you choose. ISO 27001 certification cost breaks down where the money goes.

No. Policies, training, supplier reviews and the audit itself sit outside device management. A compliance platform such as Vanta tracks that work, and trio.so sends it device results.