Audit View

General

Maintaining compliance with security and privacy frameworks like ISO 27001, ISO 27701, SOC 2, HIPAA, and ISO 9001 demands a structured and transparent approach to tracking, documenting, and demonstrating adherence to requirements. The ‘Audit View Section’ is designed to streamline this process by providing a centralized overview for managing compliance evidence, tracking implementation progress, and preparing for both internal and external audits. 

• With Audit View, you can easily connect specific requirements to policies, procedures, operational planning and control, improvements, and other relevant information, ensuring a clear and organized compliance process. Whether you’re in the early stages of implementation, preparing your Statement of Applicability (SoA), conducting an internal audit, or undergoing an external audit, the Audit View simplifies and enhances your compliance efforts. It also serves as a cheat sheet to review requirements, quickly locate relevant evidence, and remind you how each requirement was addressed. 

Key Uses of Audit View: 

• Tracking Progress During Implementation: Connect each requirement to relevant evidence, such as documentation, implementation activities, and improvements, providing a detailed progress overview. 

• Final Check of Statement of Applicability (SoA): Audit View ensures alignment between documented policies, implemented requirements, and the SoA, if applicable. 

• Internal Audits: Audit View can be used as a foundation for internal audits, providing an organized view of compliance evidence and tracking progress against requirements. 

• External Audits: External auditors can use Audit View as a reference for quick access to compliance evidence. You can also grant auditors access to review documentation and incorporate it into their reports. 

Soon, we will expand this section with notes and tips for additional frameworks, further enhancing the versatility of the Audit View. 

Compleye Tips

The ‘Audit View Section’ is a powerful tool for tracking compliance across various frameworks. It provides a structured approach to linking compliance requirements with relevant evidence, ensuring transparency and easy access during audits. 

Availability of Audit View depends on your subscription—it may support one or multiple frameworks or regulations. If you require additional frameworks or want to upload a customized list of requirements, please contact us at info@compleye.io. 

Each framework or regulation in Audit View is structured into chapters and controls, which can only be modified by Compleye. If you identify any errors in the list, please let us know. 

Structure of Audit View: 

Audit View consists of several columns designed to help you document and track compliance effectively: 

Step 1 Applicability: By default, all controls are set to ‘Yes’ (applicable). You can deselect controls that do not apply to your scope. If appliable, ensure that your Statement of Applicability (SoA) aligns with these settings. 

Step 2: Evidence of Implementation: Add evidence using the blue ‘+Add Evidence’ button and select the appropriate evidence type:  

a.OPCs, Policies & Procedures, Improvements: Items created in these sections can be reused for multiple controls.  

b.Other Evidence: You can upload a screenshot, document, or you can provide a link to an external tool, document, or any Compleye Online section and assign a title for easy recognition.  

Step 3: Viewing & Managing Evidence: 

• Click on ‘See all evidence’ to view a complete overview. 

• Each piece of evidence is hyperlinked for easy access in a new tab. 

• To remove evidence, use the three dots ([…]) on the right side. 

• To add more evidence, click the blue ‘+Add Evidence’ button. 

Tips for Using Audit View: 

• Regularly update evidence to align with your latest policies and procedures and operational planning & control. 
• If applicable, before an audit, verify that all applicable controls match your Statement of Applicability. 
• Reuse existing documentation and link relevant tools to minimize redundancy. 
• Keep Audit View updated so that it can serve as a real-time compliance tracker during audits.