Blog

Can an assessor perform consulting roles for TPN Service Providers?

In addition to performing assessments as an accredited TPN Assessor, TPN Assessors may also perform consultative roles for Service Providers to assist Service Providers with their security efforts and processes with the following rules:

  • Accredited TPN Assessors may perform consulting, advising, and remediation planning services if they have NOT been the assigned Assessor for the site or application being assessed within two years of the assessment publication date, including the current assessment.
  • Accredited TPN Assessors may perform technical testing (e.g., Penetration Testing, Vulnerability Scanning, Code Review, etc.) if they are NOT currently the assigned Assessor for the site or application being assessed, but they may perform technical testing BEFORE or AFTER the assessment has been completed
  • Assessor company (i.e., same company or different companies) does not affect the above rules.