Assessments are point-in-time evaluations of your compliance. Use them to prepare for audits or evaluate your current compliance posture.
Creating an Assessment
To create a new assessment:
Go to Assessments in the sidebar
Click Add Assessment
Select the framework you want to assess against
Give your assessment a name (e.g., “SOC 2 2025 Annual Audit”)
Set a due date
Click Create
Working Through Controls
Once your assessment is created:
Open the assessment
You’ll see a list of all controls from your framework
Click on a control to start working on it
For each control, you’ll provide:
• Response—Describe how your organization meets the requirement. Be specific and reference actual policies, procedures, or systems.
• Artifacts—Attach evidence files that prove compliance, such as:
– Policy documents
– Screenshots
– Configuration exports
– Audit logs
– Test results
Handling Gaps
When you find a control you don’t fully meet:
Create a Task or Issue linked to that control
Assign an owner
Set a due date
Track remediation work
This creates a clear audit trail of how compliance gaps were identified and addressed.
Tracking Progress
Your assessment dashboard shows:
• Total controls
• Controls completed
• Completion percentage
• Outstanding tasks/issues
Use this to monitor progress toward completing the assessment.
Generating Reports
When your assessment is complete:
Go to the Reports tab
Click Add Report
The system compiles your responses and artifacts
Export or share the report with auditors