Evidence is attached when you run a test, from the implemented control’s Testing & Evidence tab. The Tests page lists every test; the run itself is done on the control.
What a run can keep
- A file uploaded with the run.
- An item already in the evidence library.
- A document from the document library.
- A new image of a linked register, captured as the register stands at that moment.
- For an issued policy, a capture of the acceptances list.
Replaced and archived
A later run can replace older evidence, which is then left out of the freshness check. Archived evidence stays on the list and is also left out. The library copy remains until you remove it there.
Set the expiry on the library item or on the evidence you add. The next review date of the test is separate, and is covered with adding and running a test.