Audits, policies and controls that build on each other.

Audit management

Internal and external audits in one structure.

• Projects and engagements, internal or external
• Templates with sections, controls and tests
• Five test types: document review, technical test, observation, walkthrough and interview
• Section submissions and findings
• Reminders on a schedule
• A generated audit report
• Import controls and tests from CSV

Policy management

Write a policy once, keep it current, and show which controls it covers.

• Send for review, approve, publish, deprecate
• New versions with the old ones kept
• Map policies to controls
• Review policies inside an audit
• Start from platform library policies or import your own by CSV

Controls & frameworks

One common set of controls, mapped across frameworks.

• Common control tree
• Mappings from each control to framework requirements
• Coverage view by framework

Evidence & KashiLink

Collect evidence once and reuse it.

• Evidence records with review and acceptance
• KashiLink matches evidence to controls by tag
• Coverage and gap views show what has no evidence yet
• Pull last cycle's evidence into a new engagement, with a preview first

Automated checks

17 checks across AWS, GitHub, Google Workspace, Microsoft 365, Okta and Zoho, with results attached to your audits.