NIST SP 800-30 Risk Assessment
15 distinct evidence review items; supporting tests are partial evidence.
Evidence preparation
Professional and MSP include scoped programs, evidence actions, templates, review decisions, readiness work queues and exports. Free retains ISO assessment scope and the shared design.
Published edition and limits
Revision 1. Evidence preparation only; this profile does not establish certification, legal compliance or complete automated coverage. Scope, applicability and current source amendments require reviewer verification. Original IT Audit Factory workpapers; public official sources linked. No government endorsement.
Technical coverage is partial. Mapped tests supply supporting observations; items without a mapped test require manual or external evidence. No new collector, automatic legal conclusion or certification is claimed.
C28 is user-confirmed working. C31-R1 installation and customer-environment acceptance are pending. This website patch is prepared, not deployed.