Azure Devops

Set up Azure DevOps integration for automated tests with TrustCloud

TrustCloud’s API-based integrations map seamlessly to your frameworks and controls to power automated evidence collection, continuous monitoring, and predictive risk analysis. Let’s explore how you can set up Azure DevOps for automated tests.

By granting TrustCloud limited access to metadata through a service principal account, you can ensure that your systems remain compliant with your adopted controls. TrustCloud’s focus on trust, security, and simplifying compliance makes it a valuable asset in the GRC landscape.

Read our GRC Launchpad article: Integrations to learn more.

Explore 100+ evidence collection integrations to power evidence collection and real-time risk analysis.

Purpose

Once you set up your compliance program, TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read metadata about the configuration settings for your Azure DevOps account so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to Azure DevOps metadata

1. Login to your Azure DevOps instance as a user who has administrative privileges in your organization.
2. In your Azure DevOps console, copy the organization name for which you want to set up a connection.
   
3. Open Organization Settings by clicking on the Organization Settings tab.
   
4. Within the Organization Settings, click on the Policies tab and enable the Third-party application access via OAuth option to allow TrustCloud to gain read-only access.
   
5. Input the Organization Name saved in step 1 into TrustOps.

In conclusion, TrustCloud offers API-based integrations that seamlessly connect with your frameworks and controls, allowing for automated evidence collection, continuous monitoring, and predictive risk analysis. By setting up Azure DevOps integration, you can grant TrustCloud limited access to metadata through a service principal account, ensuring compliance with your adopted controls. TrustCloud’s focus on trust, security, and simplifying compliance makes it a valuable asset in the GRC landscape. With over 100 evidence-collection integrations, TrustCloud empowers real-time risk analysis and provides a comprehensive solution for maintaining compliance in your systems.