Assessment

Every assessment follows a framework-specific methodology, not a generic checklist. Every step an assessor needs to complete is captured within the workflow. Nothing happens outside of it. Assign team members to specific phases or activities, track dependencies, and ensure nothing is missed.

• Framework-tailored phases: plan, scope, assess, and report
• Completion criteria and dependencies on every activity
• Assign assessors to phases, objectives, or activities for parallel work
• Fully trackable: progress across phases, controls, reviews, and open RFIs

Each area/regulation/guidance has its own phased methodology that mirrors how assessors actually work.

• Capture engagement details, team roles, milestones, and methodology upfront
• Define the boundary: classification, environments, stakeholders, external services
• Assess controls through multiple organized views, not one flat list
• Produce reports with narrative sections alongside auto-populated control data

Control assessment is organized into distinct views so assessors can focus on what matters right now. Filter controls by who's responsible, which guideline they belong to, their current status, or whether they're waiting on any response. Each view shows only the relevant controls with the right context.

• By responsibility: assess System Owner controls separately from Consumer or Provider
• By guidance: work through one guideline or mitigation strategy at a time
• By approval status: review everything that's ready for sign-off in one place

Capture external service dependencies in scoping, and the system flags controls needing responses during assessment. Everything an assessor needs to produce the final deliverable is within the workflow.

• External services identified in scoping trigger information request activities during assessment
• Ineffective controls prompt assessors to add recommendations before progressing
• Report narrative sections display related control data, evidence, and guidance
• Three deliverables generated from one assessment: PDF report, action matrix, compliance note

Assessment leads see the full picture without chasing team members. How many controls are assessed, how many are pending review, which requests are still open, and where each phase stands. The workflow is fully trackable from start to finish.

• Phase, objective, and activity completion tracked in real time
• Control status breakdown: assessed, pending review, open requests at a glance
• Multi-assessor visibility so leads can spot bottlenecks early
• Click any metric to jump directly to the filtered view