Worksheet

Audit readiness evidence tracker

A single-page tracker with a row per control. Columns: control name, covering policy, owner, evidence file or system, collection frequency, last collection date and open gaps. A top block notes which buyers asked for which report.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “SOC 2 or ISO 27001 readiness for a small SaaS company”, www.gullysystem.com/blog/soc-2-or-iso-27001-readiness-for-a-small-saas-company