Evidence That Holds: Collection, Freshness and Reuse
Most audit pain is evidence collected late, stale or twice. Run an evidence calendar so the right proof is ready before anyone asks.
Prepares you for: CISA · ISO/IEC 27001 Lead Auditor · ISO/IEC 42001 Lead Auditor
What you'll be able to do
- Set up an evidence calendar with owners and a cadence for each control
- Name and store evidence so anyone can find it in seconds
- Decide when evidence is too old to use
- Reuse one piece of evidence across two frameworks with an index
An evidence calendar and index
What's in it. An evidence calendar with owners and cadence, a naming and retention convention, and an evidence index mapped to controls across two frameworks.
You build it lesson by lesson, using your own organization, and submit it for your certificate. It's yours to keep and adapt.
Who it's for
GRC analysts, control owners and anyone who scrambles for screenshots before an audit.
What's inside
- Part 1Where the requirement comes from 16 min
- Part 2How small teams and enterprises meet it 14 min
- Part 3The method, step by step 20 min
- Part 4Hands-on lab: small team choose one 60 min
- Part 5Hands-on lab: enterprise choose one 120 min
- Part 6Finish and submit your deliverable 20 min
Built for your size
The requirement is the same everywhere. How you meet it depends on who you have. You pick the lab that matches your organization.
How you earn the certificate
Submit your finished deliverable, which is scored against a published rubric, and pass a short scenario quiz. Your certificate goes to your wallet and can be checked by anyone on the public register.