9. Audit Manager

The Audit module lets you plan, perform and track audits of your environment: internal reviews, certification preparation or third-party assessments. An audit walks through the elements of a framework, records what the auditor observed, and turns gaps into recommendations and actions you can follow to resolution. It is designed for internal audit teams, compliance officers and the external auditors they work with.

Each audit covers a scope: the framework elements under review, with each element marked In Scope or Out of Scope. Selecting an element opens its working tabs: Element Details, Questions, Observations, Audit Recommendations and Actions Registry. An auditor can be assigned to the audit, and elements carry an implementation status (Fully Implemented, Partially Implemented, Not Implemented, Not Applicable) plus a maturity assessment.

Auditors raise questions on each element and mark them In Progress or Resolved as answers come in. Every question carries a clarification thread, a running conversation where the audited team and the auditor exchange details until the point is settled; threads can be resolved and reopened. Observations capture what was actually found.

Findings become recommendations with a priority, and recommendations break down into concrete actions tracked in the Actions Registry, so nothing discovered during the audit is lost once the report is delivered.

The statistics view summarises the audit at a glance: the Security Framework Maturity Overview, the Audit Scope breakdown (in scope, out of scope, unknown) and the Implementation Status distribution. When the work is done, the audit is completed; it can also be reset if it must be rerun.

Audit reports move from Draft to Published (and later Archived) and can be shared by link. Throughout the audit, evidences (documents or links) are attached where they support an answer or a finding.