Skip to content

Audit management

Keep audit scope, evidence, and reviewers aligned.

Review in-scope frameworks, linked policies and evidence, and internal or external auditor assignments in Controllo. Export framework details when it is time to share the review.

One audit context

Four views. One reviewable audit context.

Framework scope, supporting documents, and auditor assignments stay visible as one connected handoff instead of four disconnected folders.

Audit dossier

Assigned Audit Reviewers

ASSIGNED
ViewReviewersASSIGNED
Control linkMapped controlsLinked record visible
Internal AuditSOC 2 Type IIAssigned
External AuditISO/IEC 27001:2022Assigned
Assigned review paths2 frameworks
File contextAssignmentReview context retained
Reviewer pathAssigned2 framework assignments
Review sequence

Audit documentation

Keep policy and evidence records linked to their controls.

Documents are easier to review when their file dates and control relationships stay visible not just their names in a folder.

Framework context stays available through the control links attached to each record.

Document repository

Policy and evidence records
Linked record filePolicy file

Policy and procedure record

Access review policy

Defines the quarterly user access review, responsible owners, and revocation expectations.

Access_Review_Policy_2026.pdf15 Aug 2026CC6.1 Access review control
Effective date stays with the linked control record.

Auditor management

See who reviews each framework.

Keep the primary auditor contact and additional contacts visible beside separate internal and external framework assignments.

Contact rolesKeep primary and additional contacts clear for the team managing the review.
Assignment typesSeparate internal and external auditor assignments for the same audit cycle.
Framework mappingConnect reviewer assignments to the frameworks in scope.

Reviewer contacts

Contacts tied to assigned frameworks

Main contact

Primary contactContact record for audit coordination.

Supporting contacts

Additional contactsContact record for audit coordination.

Framework assignments

Internal audit

SOC 2
Assigned
Primary contactAssigned framework

External audit

ISO/IEC 27001
Assigned
Additional contactAssigned framework
Audit management

Walk through your next audit handoff.

Bring one real framework review. We will look at the documents, auditor assignments, and decisions that need to stay connected.

Framework scope · Linked records · Auditor assignments