Evidence Binderthe free audit-evidence library, and the binder you build from it

Sample binder. Fictional data, clearly labelled. Free.

A sample evidence binder

Ten rows of a fictional 20-person clinic binder, from the same held record the paid binder runs on: the requirement, the evidence to keep, the owner and the work status, with the source clause. The paid binder does this for every requirement in the frameworks you choose, adds the gaps and the multi-framework dedup, and exports a spreadsheet and a printable binder.

This is a specimen. The names, owners and statuses are fictional and exist only to show the shape.

ClauseRequirementEvidence to keepOwnerStatus
5.1Policies for information securityStatement of Applicability entry for control A.5.1, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.2Information security roles and responsibilitiesStatement of Applicability entry for control A.5.2, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.3Segregation of dutiesStatement of Applicability entry for control A.5.3, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.4Management responsibilitiesStatement of Applicability entry for control A.5.4, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.5Contact with authoritiesStatement of Applicability entry for control A.5.5, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.6Contact with special interest groupsStatement of Applicability entry for control A.5.6, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.7Threat intelligenceStatement of Applicability entry for control A.5.7, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.8Information security in project managementStatement of Applicability entry for control A.5.8, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.9Inventory of information and other associated assetsStatement of Applicability entry for control A.5.9, showing inclusion or justified exclusion, implementation sAcme ITGathered
5.10Acceptable use of information and other associated assetsStatement of Applicability entry for control A.5.10, showing inclusion or justified exclusion, implementation Acme ITGathered

Every line is our statement of the clause, in our words, drawn from the copy we hold. The binder does not certify and does not perform an audit.