Workbench
Ten templates with seed data + CSV export.
Open a template, edit the rows, export as CSV. Designed so the exported file drops straight into your evidence room or onto a teammate's desk. Pro templates have the full analyst fields and unlock with a Pro subscription.
Capture risks with inherent and residual scoring, an owner, and a treatment plan.
Open →
Map each framework criterion to actual controls, owners, test methods, and frequency.
Open →
Skeleton for a policy with purpose, scope, requirements, exceptions, and enforcement.
Open →
Pre-audit evidence collection list grouped by control, ready for the walkthrough.
Open →
Audit findings with severity, owner, action, due date, dependencies, and verification notes.
Open →
Operational issues or self-identified gaps tracked before they become findings.
Open →
Per-vendor scope, data classification, due diligence artifacts, and renewal date.
Open →
One-page summary spine: top risks, what changed, what is closed, what is open, the ask.
Open →
Status across multiple frameworks per system or business unit.
Open →
Define the test for a specific control: steps, evidence, expected outcome, and exceptions.
Open →
Need a static blank starting point? See /templates for the printable 5×5 risk register, control assessment worksheet, vendor questionnaire, and audit outline.