Bastion
Security and standards readiness for organisations that need to prove they are safe to work with.
The problem
A large prospective client sends a 140-question security questionnaire. It is the fourth this year, and each one has been answered from scratch.
Who it is for
Firms that sell to larger clients or the public sector: agencies, IT providers, law and accountancy firms, software companies, recruiters.
What it does
- Framework checklists for the standards the organisation chooses, such as Cyber Essentials or ISO 27001.
- A policy library with staff acknowledgements.
- An answer library for client questionnaires: approved answers reused, AI drafts a first pass, a person approves every answer.
- A risk register with owners and treatment plans.
- Evidence gathered automatically from Threshold (access), Standing (training), Vetted (suppliers) and Duly (renewals).
- An incident log and an audit pack export.
Why it is different
The big compliance platforms are priced for funded technology companies. Smaller firms answer questionnaires by hand each time. Every questionnaire passed faster is work won.
AI and automation
AI drafts questionnaire answers from the answer library and the organisation’s policies, citing the source for each. It maps evidence collected for one standard onto another, drafts policies fitted to the organisation, and points out gaps before an auditor does. Evidence arrives automatically from linked products, with review reminders. A person approves every answer.
First release
One framework checklist, the policy library with acknowledgements, and the questionnaire answer library.
Good to know
Bastion helps organisations prepare; it never claims to certify them.