Check evidence coverage for an application
For one application, review each requirement’s evidence: where it came from, when it was recorded, and whether it supports the control. Missing evidence is shown as missing, not as a pass.
Open this guide in VeriProof(opens in a new tab)
Review a control
- Open the mapped control or requirement.
- Review the evidence source, date, application, and provenance.
- Confirm whether the record supports the stated control activity.
- Record missing, partial, or conflicting evidence.
Tell gaps apart
Missing evidence, an adverse control assessment, and a policy breach are different conditions. Name the one you found when you assign follow-up work.