DRATA ADVANCED
An active, centralized environment for compliance workflows, control ownership, evidence management, and remediation tracking.
08 / COMPLIANCE INFRASTRUCTURE
Security and compliance, managed with discipline.
Motenza Capital operates an active security and compliance program through Drata Advanced. The environment centralizes policy management, evidence, risk, access governance, and remediation across our digital funding operations.
Our NIST CSF 2.0 implementation is in progress. CIS Controls and future independent SOC 2 assurance are sequenced as the program matures.
NIST CSF 2.0
Alignment and implementation of controls based on the NIST Cybersecurity Framework 2.0 are in progress.
CIS CONTROLS
Planned as the next control-maturity workstream following the current NIST CSF 2.0 implementation phase.
SECURITY POLICIES
Formal documentation and evidence management for information security, access controls, privacy, and data governance.
VENDOR & RISK MANAGEMENT
Structured vendor oversight and third-party risk-management processes designed to strengthen operational accountability.
INCIDENT RESPONSE & CONTINUITY
Incident-response and business-continuity procedures are being developed, documented, maintained, and supported with appropriate evidence.
STATUS — ACTIVE PROGRAMManaged through Drata Advanced
PROGRAM STATUS
Drata Advanced — active compliance programNIST CSF 2.0 — implementation in progressCIS Controls — planned next workstreamSOC 2 — future independent assurance
Motenza Capital does not represent that SOC 2, ISO 27001, NIST, or other certifications have already been completed. Applicable assessments, audits, and certifications remain subject to their respective implementation and independent review processes.