Audit
Assess compliance with one or more standards (ISO 27001, IEC 62443, ANSSI, French Labour Code, Seveso…), collect evidence, and steer the corrective action plan.
The module is transverse: it is open to cyber, EVRP and industrial risk projects, and only offers the standards relevant to the project type.
Hidden by default
Restricted to "Advanced modules": it requires the right (granted by an administrator), then switching it on yourself in My Account, for the menu entry to appear.
The four pages
| Page | Role |
|---|---|
| Home | KPIs, audit team, ongoing standards |
| Audit grid | Article-by-article assessment, evidence, actions |
| Dashboard | Multi-standard summary view |
| Report | Word and Excel export |
| Framework library | Catalog and custom checklists |
Two rates you should not confuse
| Indicator | Calculation |
|---|---|
| Progress | Share of articles assessed — not-applicable articles count as assessed |
| Compliance | Compliant articles out of applicable articles only |
An audit can be 100% complete with a low compliance rate: the first measures the work done, the second the outcome.
Audit team and role separation
Declare the auditors by email in the Audit team panel (reserved to the project owner).
- A declared auditor can only fill in the auditor validation in the grid.
- Other members fill in the audit (status, observations, evidence, actions).
- Empty list = no separation: every member can edit everything.
This is what lets you trace who assessed and who validated — every article carries "Assessed by … on …" and "Opinion given by … on …".
Dashboard
Multi-standard summary: articles assessed, evidence collected, unjustified N/A, breakdown by standard, and the consolidated list of all actions (filterable by status and priority) with standard, article, owner, due date and priority.
The "unjustified N/A" KPI
An article marked not applicable without a reason is flagged everywhere in the module. It is the point most often raised in a counter-audit: an N/A without justification is indefensible.