Audit-readiness dashboards

Tugboat Logic (acquired by OneTrust), 2021—2023

Dashboards for SOC 2, ISO 27001, GDPR and HIPAA programs, and the component library behind them.

Context

Tugboat Logic helped companies get ready for security audits. Customers tracked their controls and evidence across audit cycles.

Problem

Customers needed to see how ready they were, and what had changed in their evidence since the last audit.

An illustration of evidence compared between audit cycles. Not real customer data.

What I did

  1. Built customer-facing audit-readiness dashboards.
  2. Built version comparison of evidence between audit cycles.
  3. Grew a Storybook component library that cut duplication, tested with React Testing Library and Cypress.
  4. Stayed through the OneTrust acquisition and the platform integration that followed.

Outcome

  • Shipped and maintained through the acquisition.

Stack

React, TypeScript, Redux, Storybook, Cypress

Want to talk about work like this?

I’m happy to go deeper on any of it, including what I’d do differently.