Audit grid
The auditor's workstation: article-by-article assessment, evidence, validation and corrective actions.
Structure
A sidebar lists the standards available for the project type. Check the ones to include in the audit; the others can be hidden. Articles are grouped by chapter, expandable, with full-text search.
Assessing an article
| Field | Content |
|---|---|
| Status | To audit · Compliant · Non-compliant · Not applicable |
| Finding qualification | Nature of the gap |
| Observations | Context, gap identified |
| Evidence | Type (Document, Interview, Test, Observation, Log, Report, Other), description, file reference |
| Auditor validation | Status (Validated / Observation / Rejected) + comment |
| Actions to take | Description, owner, due date, priority, status |
Justify N/A entries
An article marked "Not applicable" with no reason given in the observations is flagged with a badge and counted in the dashboard's "unjustified N/A" KPI.
Marking an entire chapter as not applicable
A dedicated button on the chapter header: it switches every article still to audit in the chapter to not applicable, with a recommended reason. The operation can be undone with Ctrl+Z.
Review cycle
The standard carries a review status, shown as a badge:
| Status | Effect |
|---|---|
| Draft | Entry open |
| Under review | Entry is frozen on the auditee side for the duration of the review |
| Reviewed | Review closed — can be reopened |
Buttons: Submit for review, Send back for correction, Close review, Reopen entry.
Reporting into the EBIOS baseline
The Report into baseline button reports the grid's results into the EBIOS security baseline (1.4). A warning flags when the baseline's rating diverges from the audit result.
Undoable deletions
Evidence and actions are deleted after a confirmation naming the object, and remain recoverable with Ctrl+Z.