Testing and evidence on a control

Open the control and go to Testing & Evidence. This tab is where the operating check lives. The Tests page is the list across every control.

Tests

Add test sets the test up. You can link a policy or a register, and you are then asked whether to run it. Run test records effectiveness and a next review date, and can include an uploaded file or an evidence-library item. A register-linked run also saves a new image of that register.

A test that has not been run stays Not tested. Delete a test from its row when it should no longer be part of the control. Expand a test to see its runs.

The cross-control list, statuses, and the run itself are described in Add and run a control test and Control test effectiveness.

Evidence

Add Evidence attaches proof to the control. A new run replaces that test’s previous evidence. Archived evidence stays on the list and is left out of the in-date check. The chip next to Evidence summarises that health: no evidence, all expired, some expired, or all in date.

Files you want to reuse live in the evidence library. Overall effectiveness on this control is Effective only when every test’s latest run is Effective and still in date.