Add supporting evidence to your assessment to help verify the control is in place and to share this assurance information with stakeholders.
For each assessment question users get access to Assuredly professional guidance.
In the guidance there is a list of suggested evidence to attach to your control which include all types of evidence that auditors actually ask for.
No audit is the same however each auditor often selects certain evidence based on their specific needs and in some cases using a risk-based approach.
This may include requesting evidence that relates to controls they consider to be higher risk or because the standard they are auditing against requires a complete review to be conducted of the operational effectiveness of a control.
The list of suggested evidence provided in the professional guidance tips comes from actual audits and from experienced auditors.
To add evidence to an assessment:
Link will take you to your document store where you can link existing documents to this control question.
Upload allows you to upload new documents to your document store which you can use for this assessment or future assessment questions.
Select the cog to open the evidence (document) settings.
Here you can tag evidence in various ways.
Using Tags to classify types of documents used in assessments allows you to share certain types of documents with report readers.
Important: When tagging a document as Archived ensure you remove it from being used in any assessments otherwise it will show in reports.
Read more about how to provide Supporting Evidence to Report Readers.
Read more about how to identify where evidence is used in assessments.
