Evidence Management

Evidence management is the process of identifying, tracking, and collecting artifacts that prove your controls are implemented and operating effectively. The platform provides a unified Evidence Workspace alongside a Systems Registry and Tasks section to support this workflow.

Overview

Section	Purpose	Access
Evidence	Unified workspace for scoping, reviewing, and monitoring evidence health	Evidence item in sidebar
Tasks	Manage evidence collection tasks	Tasks icon
Systems Registry	Register systems that collect evidence	Systems Registry in sidebar

---

Evidence Workspace

The Evidence section is a single unified workspace accessed via the Evidence item in the sidebar. It consolidates evidence scoping, reporting, and health monitoring into two tabs: Workspace and Dashboard.

Prerequisites

You must have scoped controls with audit artifacts before using the Evidence Workspace. If you see “No Controls Selected”, go to Control Scoping first.

Workspace Tab

The Workspace tab (powered by the EvidenceReview component) is a split-panel interface where the left panel displays the evidence list and the right panel shows the detail view for the selected item.

View Modes

Switch between two perspectives using the view mode toggle:

View	Shows
Control	Evidence items grouped by control
Evidence	Unique evidence items across all controls

Search and Filtering

• Search — Find evidence items by keyword
• Domain filter — Narrow results to a specific SCF domain

Evidence Item Configuration

For each evidence item, you can configure:

Field	Description
Is Tracked	Toggle to indicate active evidence collection
Collecting System	System responsible for collecting this evidence
Method of Collection	How evidence is gathered (API, manual, etc.)
Frequency	How often evidence is collected
Owner	Team responsible for this evidence
Notes	Additional tracking information

Batch evidence tracking is available for bulk operations when you need to configure multiple items at once.

Collection Interfaces

The platform displays available collection interfaces for each evidence item, annotated with automation level badges:

• High automation — Fully automated via API
• Medium automation — Partial automation available
• Low automation — Primarily manual collection

AI-Powered Collection Suggestions

When AI suggestions are available, the platform recommends systems from your registry that can collect the evidence. These suggestions are based on system type, capabilities, and the nature of the evidence required.

Evidence Files

Evidence files can be uploaded directly via drag-and-drop. Supported formats include PDF, DOCX, XLSX, CSV, PNG, JPEG, JSON, and YAML.

For each uploaded file, the workspace shows:

• Preview — Inline preview where supported
• Download — Direct download link
• Malware scan status — Automated scan result for uploaded files

Evidence files are stored in Azure Blob Storage. Files uploaded via webhooks (from automated collection systems) are surfaced alongside manually uploaded files in the same list.

Collection Wizard

The Collection Wizard provides a guided setup flow for configuring automated collection points. It walks you through connecting a registered system, selecting the evidence it will provide, and defining the collection schedule.

Automated Collection

You can set up automated collection points that receive evidence directly from your systems. See Automated Evidence Collection for the step-by-step setup wizard.

Assignments, Comments, and Tasks

Each evidence item supports:

• Assignments — Assign team members to manage evidence
• Comments — Discuss collection approaches and issues
• Tasks — Create collection tasks directly from evidence items

Evidence Maturity Assessment

The workspace includes evidence maturity assessment with advisory cards that highlight areas for improvement, helping you understand the quality and completeness of your evidence program over time.

---

Dashboard Tab

The Dashboard tab (powered by the EvidenceDashboardTab component) provides a high-level view of evidence health across your organization.

Health Summary Bar

The header displays aggregate counts with percentages:

• Tracked — Total evidence items with active tracking
• Fresh — Evidence that is current and up to date
• Stale — Evidence that is approaching its collection deadline
• Critical — Evidence that has exceeded its collection deadline
• No Data — Tracked evidence with no collection data yet

A color-segmented health progress bar provides an at-a-glance visual summary of these statuses.

Status Filter Tabs

Filter the dashboard view by evidence health status:

Tab	Color	Shows
All	—	All tracked evidence items
Fresh	Green	Evidence within its collection window
Stale	Amber	Evidence approaching its deadline
Critical	Red	Evidence past its deadline
No Data	—	Evidence with no collection records

Evidence Health Cards

Each evidence item is represented as a card displaying:

• Status dot (color-coded by health)
• Evidence identifier and description
• Last collection date
• Collecting system

Clicking any card navigates directly to that item in the Workspace tab, pre-selected and scrolled into view. This makes it easy to act on gaps identified in the dashboard without switching between views manually.

---

Tasks

The Tasks section helps you manage evidence collection activities. Access it by clicking the Tasks icon in the sidebar.

Task Views

View	Shows
My Tasks	Tasks assigned to you
All Tasks	All organization tasks

Framework Filtering

Use the framework filter in the Tasks view to show only tasks related to evidence within specific frameworks.

Task Types

Type	Purpose
Feasibility	Assess if evidence can be collected as planned
Setup	Configure systems for evidence collection
Collection	Perform evidence collection activity
Review	Review collected evidence for completeness
Documentation	Document collection procedures
Issue	Address problems with evidence collection

Task Properties

Each task displays:

• Title — Description of the work
• Evidence ID — Link to related evidence item
• Priority — Low, Medium, High, or Critical
• Due Date — Target completion date
• Status — Not Started, In Progress, or Completed
• Assigned To — Responsible team member

Task Status Colors

Status	Color
Not Started	Blue
In Progress	Orange
Completed	Green

Working with Tasks

Update a task:

1. Click Edit on the task card
2. Change the status
3. Add completion notes if applicable
4. Click Save

Navigate to evidence: Click the evidence ID link to jump directly to that evidence item in the Evidence Workspace.

Task Stats

The header shows:

• Total tasks
• Tasks by status (not started, in progress, completed)
• Overdue count

---

Systems Registry

The Systems Registry manages the systems that provide evidence for your compliance program. Access it via Systems Registry in the sidebar (under Operations).

Why Register Systems?

Registered systems can be:

• Selected as “Collecting System” in the Evidence Workspace
• Matched to collection interfaces for automation suggestions
• Used by AI-powered suggestions to recommend collection approaches
• Tracked for capability coverage

System Types

Type	Examples
Cloud Provider	AWS, Azure, GCP
Identity Provider	Okta, Azure AD, OneLogin
Ticketing	Jira, ServiceNow, Zendesk
Logging	Splunk, Datadog, ELK
Security Tool	CrowdStrike, Qualys, Tenable
Code Repository	GitHub, GitLab, Bitbucket
Document Management	SharePoint, Confluence, Notion
Custom	Organization-specific systems

System Status

Status	Meaning
Active	System is operational and available
Inactive	System is not currently in use
Deprecated	System is being phased out

Adding a System

1. Click + Add System in the header
2. Complete the form:
   • Name — System display name
   • Vendor — System provider
   • Type — Category from the list above
   • Description — Purpose and capabilities
   • Status — Current operational state
3. Click Save

System-Evidence Matching

When you register systems, the platform:

1. Identifies compatible collection interfaces based on system type
2. Suggests these systems when configuring evidence tracking in the Workspace
3. Helps you understand automation potential across your evidence program

---

Evidence Collection Workflow

Here’s the recommended workflow for managing evidence:

1. Scope Your Controls

Before tracking evidence, ensure you’ve selected controls in Control Scoping. Only evidence from scoped controls appears in the Evidence Workspace.

2. Register Your Systems

Add your organization’s systems to the Systems Registry. This enables:

• Evidence-to-system matching
• AI-powered collection suggestions
• Automation potential tracking

3. Configure Evidence Tracking

In the Evidence Workspace (Workspace tab):

1. Switch to Evidence view for efficient bulk configuration
2. Use search and domain filter to find specific items
3. For each evidence item:
   • Enable Is Tracked toggle
   • Select Collecting System
   • Set Method of Collection
   • Choose Frequency
   • Assign Owner
4. Use batch evidence tracking when configuring many items at once

4. Upload and Manage Evidence Files

For each tracked item:

1. Drag and drop files directly onto the evidence detail panel
2. Review malware scan status before relying on uploaded files
3. Files from webhook-based automated collection appear automatically alongside manual uploads

5. Create Collection Tasks

For evidence requiring manual collection:

1. Navigate to the evidence item in the Workspace
2. Create tasks for collection activities
3. Assign team members
4. Set due dates aligned with collection frequency

6. Monitor Evidence Health

Use the Dashboard tab in the Evidence Workspace for ongoing oversight:

• Review the health summary bar for overall program status
• Use status filter tabs to focus on stale or critical evidence
• Click any evidence health card to navigate directly to the item in the Workspace for remediation
• Track fresh vs. stale vs. critical ratios over time

---

Best Practices

Evidence Workspace

1. Start with high-automation evidence — Configure evidence with API collection first
2. Group by team — Assign evidence to appropriate owner teams
3. Document collection methods — Be specific about how evidence is gathered
4. Link to systems — Always specify the collecting system
5. Monitor the Dashboard regularly — Catch stale evidence before it becomes critical

Task Management

1. Use appropriate task types — Match task type to the actual work
2. Set realistic due dates — Align with collection frequencies
3. Complete tasks promptly — Update status as work progresses
4. Add completion notes — Document what was done for audit trail

Systems Registry

1. Keep systems current — Update status when systems change
2. Use accurate types — Enable proper capability matching
3. Include all relevant systems — Don’t miss evidence sources

---

Related Guides

• Control Management — Scope controls that drive evidence requirements
• Dashboard Overview — View evidence tracking metrics
• Automated Evidence Collection — Set up collection points for automated evidence
• Framework Management — Understand control-to-framework mappings