RykerAudit
Est. 2019 · Independent practice

Evidence,
not assurance
theatre.

Ryker Audit is a small, senior team performing cybersecurity and controls assurance for companies that take their attestations seriously. We write the report a regulator would write.

Request a scoping callSee the engagement model
Architectural blueprints arranged on a light surface, representing audit documentation
Fig. 01 — Working papers, Q3 engagement
FrameworksSOC 2 Type IIISO/IEC 27001HIPAAPCI DSS 4.0NIST CSFHITRUST
§ 01 — Method

The audit is not a checklist. It is a narrative — a careful reading of how a system actually behaves under stress, scrutiny, and time. Our reports are written to be read, not merely filed.

01
Scope

We agree on what is in and out of scope in writing, before fieldwork begins.

02
Evidence

Controls are tested against live artifacts — not screenshots, not assertions.

03
Report

A written attestation defensible to your board, auditor, and customers.

§ 02 — Services

Eight engagements,
performed seriously.

  1. 01
    SOC 2 Type II
    Trust Services Criteria audits with continuous evidence collection across the observation window.
  2. 02
    ISO/IEC 27001
    Stage 1 readiness, Stage 2 certification, and surveillance audits aligned to Annex A controls.
  3. 03
    HIPAA & HITRUST
    Security Rule assessments for covered entities and business associates handling PHI.
  4. 04
    PCI DSS 4.0
    Self-assessment guidance and Report on Compliance support for merchants and service providers.
“They asked harder questions than our previous auditor and produced a report our board actually read end to end. The findings were specific enough that we could fix them on Monday.”
Head of Security
Series C fintech, 2024 engagement
§ 03 — Begin

A 30-minute call is
the cheapest part of the engagement.

Schedule scoping call