Audits
Read audit readiness and resolve supported blockers
Use the audit handoff checklist to find current evidence, review, approval, and treatment work.
Before you start
Who this is for: Compliance operators with audit-engagement read access; running a scan requires test-run permission.
- Enable at least one framework and use the intended organization.
- Treat readiness as a view of recorded program information, not an audit opinion.
Follow these steps
Open Audit Readiness
Go to Audits > Audit Readiness. Read the Audit handoff checklist and the displayed posture. Review framework scope and evidence coverage alongside the total unresolved count; a summary can combine several types of pending work.
Follow blocker groups
Open the relevant group, such as Expired evidence, Overdue control reviews, Pending approvals, Open risks, Overdue vendor reviews, or Pending attestations. Inspect the underlying records and their owners. Resolve the actual workflow rather than changing metadata solely to clear a counter.
Review scan findings
If authorized, run the readiness scan and inspect Readiness findings. The page describes checks for evidence currency, overdue requests, and policy review dates. Use the linked source records and available remediation steps. A scan is limited to the checks it performs.
Verify after remediation
Return after renewing evidence, completing an independent approval, reviewing a risk, or resolving other supported work. Recheck the source record and readiness view, and rerun a scan when appropriate. Use Export framework status if available, after verifying that the scope and information are suitable for the handoff.
What you should see
You can identify the specific recorded blockers and confirm which have been resolved through their underlying workflows.
If something doesn’t look right
No framework scope is available
Enable the intended framework before preparing the audit package.
A blocker remains after work was done
Check the saved state, exact version, due date, and whether a new scan or refresh is needed. Submission alone may leave review pending.
The checklist appears clear
Inspect current evidence and engagement scope before sharing. A clear view does not guarantee an audit outcome or cover every possible requirement.
Still need a little help?
Ask the assistant about these steps, or tell our team where you got stuck.
Contact support