IT Audit Factory · Evidence-first audit operationsFree · Professional · MSP

Historical guide. This document retains its original version. See the current release guide for current build, storage and installer information.

Focused release in development: C31 supports new ISO 27001, CMMC Level 2, NIST SP 800-171 Rev. 2/3, NIST CSF 2.0 and NIST SP 800-53, HIPAA Security, ITAF ransomware readiness and PCI DSS preparation assessments. Other framework packs and advanced automation are in development. C12 is the owner-confirmed working baseline; C31 acceptance is pending.

Documentation

Audit intelligence workspace

Guided and expert workflows, assessment intelligence and evidence review actions.

MSP4.1.0
All documentation / MSP / 4.1.0
This reference is bundled with the 4.1.0 engine and may retain earlier UI terminology. Use the current 4.1.0 installation/security guides for the new wizard and activation steps. Its procedures apply to MSP; use the separate Free or Professional guide for those editions.

Use the approved 4.1.0 installer for your edition and confirm the version shown in the installed application. Published package availability is shown in Downloads & beta access.

User Experience & Advanced Audit Intelligence

Coordinated views

  • Self-Audit View — guided framework/program workflow and next steps.
  • Full Workspace — complete operational workspace.
  • Auditor Review — evidence-first review experience without modifying original evidence/test results.
  • Audit Day Mode — presentation-oriented readiness and proof access.
  • Contributor Mode — evidence-request/contribution-oriented workflow.

Advanced Audit Intelligence

Audit Reality Check, Scope Impact, Framework Expansion, policy-to-reality drift, evidence health/dependencies, readiness/maturity/drift, Proof Replay / Show Me the Proof, and Prepare Me for the Auditor are treated as shared Enterprise/MSP capabilities.

Demo workspace

The product contract requires an isolated, clearly marked fictional demo workspace showing a completed ISO 27001 assessment without touching production/client data.