How to make the audit less time consumption 225



  • We are thinking in create a site in our intranet where all the elements responsible for the controls execution can put the evidence that their controls were effectively done. With this site the external auditors could easily find the audit traces making the burn of external audit more light to all in our company.
    Is there anyone developing something like this. We’d like to have some inputs about this theme. :?:



  • This post is deleted!


  • This post is deleted!


  • Yes, we are doing exactly that. We have a very large number of sites and applications involved and there is no other way to get it done.
    You need to provide sufficient guidance for the type of evidence to be provided and have someone continuously review the information uploaded to ensure that there is a uniform approach to the naming conventions used and the format of the data provided. This way the auditors become comfortable with your documentation and it flows much more smoothly. Additionally, be sure that you have a place to put obsolete evidence after an element or control has been changed rather than delete anything. Finally, severely limit personnel that can delete or move evidence once it has been uploaded. Good luck.


Log in to reply