CTFM 1001
Requirements for Technology Framework Management Systems
The baseline standard. Establishes the minimum requirements any organisation must meet to operate a QJANDO-aligned technology framework.
, Certification Programme
QJANDO
Verified.
Five published standards covering management systems, technical operations and governance. Each audit ends with a certificate, a public registry entry and a digital seal your customers can verify in one click.
QJANDO Verified
CTFM 1001 · 2026
Published standards
CTFM 1001CTFO 2002CTFM 9100CTFO 4500CTFM 7800
, Category 01 / Management System
The Management System standards.
Within this world, everything revolves around the Management System. A CTFM/CTFO certificate conveys that an entire organisation operates according to QJANDO's framework , not just a single product or team.
CTFO 2002
Technical Operations & Process Optimization Requirements
Certifies that operational IT processes , change, incident, capacity, monitoring , are documented, measured, and continually optimised.
CTFM 9100
Standard for Enterprise Technology Framework Architecture
A heavy-duty quality standard for large enterprises operating complex, multi-entity technology estates.
, Category 02 / Code of Practice
Guidelines & best practice.
Where the Management System defines what must be in place, the Code of Practice standards define how the work is done day-to-day.
CTFO 4500
Code of Practice for Technical Operations Controls
Demonstrates that operational risks and controls , access, segregation, logging, recovery , are fully identified, owned, and exercised.
CTFM 7800
Guidelines for Framework Implementation and Governance
Governance-focused guidance covering the correct implementation, oversight, and continual improvement of the QJANDO framework within an organisation.
, The audit
Four stages. Twelve to sixteen weeks. Zero theatre.
- 01Application
Scoping interviews, asset inventory, control universe mapped.
- 02Technical audit
Pen-testing, configuration review, evidence collection.
- 03Remediation
60-day window. Our engineers help close findings if you want.
- 04Certification
Certificate issued, registry updated, seal embedded on your site.
, Audit tiers
Pick your scope.
QV-E
Essentials
from $9,800
- External attack surface audit
- Policy & access review
- Public registry listing (1y)
- Digital seal + report
Most chosen
QV-P
Professional
from $24,500
- Everything in Essentials
- Internal network pen-test
- Source code spot review
- Annual surveillance audit
- Incident response readiness
QV-X
Enterprise
scoped
- Everything in Professional
- Multi-entity scope
- Dedicated audit lead
- Board-ready report
, Trust registry
Verifiable in one click.
Every certified company is published to the QJANDO Trust Registry. Procurement, partners, and customers can verify status, scope and expiry without an email exchange. The registry launches once the first audit is completed.