Audit capabilities designed for day-to-day use

Plan work, manage your question bank, execute checklists, and track due dates — without rebuilding the same audit pack from scratch each cycle. Licensing is through Risk Management; see module pricing.

📑

Audit reporting (in development)

A dedicated audit report is being added so you can summarise scope, coverage, checklist results, and findings in one place—ready for management review and external assurance conversations.

  • Structured output from completed audit work
  • Less manual copy-paste into documents
  • Complements NC, risk, and OFI registers in Risk Management
🗓️

Audit schedule register

Maintain a clear audit register with ownership and status — internal and external audits in one place.

  • Title, kind, purpose / standard, scope notes
  • Due date tracking
  • Checklist count visibility per audit
  • Lifecycle status (scheduled → completed)
📅

Calendar view

See due and completion dates visually so teams can plan capacity and avoid scrambling at the last minute.

  • Monthly calendar of audits
  • Click through to audit detail
  • Ideal for committees and programme governance
🧩

Question bank (with imports)

Manage a living library of audit questions for repeatable checklists and consistent testing.

  • Search and sort by clause, standard, domain, status
  • Import from CSV for bulk uploading
  • Import seed questions from a library
  • Ready-to-use ISO 27001/27002 set (384 questions)
✅

Checklist driven execution

Run structured checklists on each audit so answers and evidence live with the audit record.

  • Open a checklist directly from the audit register
  • Reusable templates and ad-hoc audits from selected questions
  • Repeatable evidence capture cycle-over-cycle
🧭

Audit planning & coverage

Generate an audit plan from your question bank to cover standards/domains across a schedule.

  • Generate audits with any frequency
  • Group questions by Standard or Domain
  • Use all questions or a fixed number of questions per audit
🧾

Findings that connect

Turn checklist results into follow-up work and link them to the rest of your ISMS records.

  • Raise non-conformities
  • Raise risks
  • Raise opportunities for improvement (OFIs)
  • Optional links back to existing registers