IT Audit Factory — evidence-first audit & compliance operations
Free • Professional • MSP
IT Audit Factory iconIT AUDIT FACTORYAudit, Evidence & Compliance Operations

C31-R1 candidate: Professional and MSP retain C31 assessor-led preparation for 61 framework profiles. Free retains ISO 27001 scope. Complete automation is not claimed. C31 owner feedback confirmed frameworks installed and working; this consistency revision remains a candidate. See the current release guide.

Focused release · C31-R1 candidate

IT Audit Factory Msp

Focused ISO 27001 and CMMC assessment preparation. Features and deployment depend on the edition.

Focused assessment scope

ISO/IEC 27001

Assessment preparation using control identifiers, locally authored guidance, governance records and evidence review. Use your licensed standard for authoritative requirements.

CMMC Level 2

Practice and objective review, scope blockers, evidence requests, findings and POA&M. Technical results support assessor decisions; they do not establish a CMMC determination.

Evidence and reports

Collect applicable technical evidence, investigate missing results and export reviewer-ready material. Coverage varies by check, platform and edition.

In development

Additional framework assessments

CIS Controls, SOC 2 and additional ISO, privacy and regulatory packs are in development. They are not selectable for new assessments in the focused release. The full official PCI testing catalog also remains outside the bounded PCI preparation workflow.

Advanced collectors and integrations

Full AWS/GCP and broader Azure infrastructure coverage, Kubernetes, OT, database-security depth, dedicated SIEM/EDR/PAM integrations and integration SDKs remain in development. Existing scoped checks are not claims of complete platform coverage.

Automation and AI

Continuous compliance monitoring, automated regulatory submission, advanced AI analysis and the live Support Assistant are in development. No delivery date or regulatory outcome is promised.

Release status

C12: owner-confirmed passed and working. C31-R1 is the focused candidate being built and validated. Production acceptance, signing and clean-machine installation results will be published with the final release. This site does not offer an unvalidated C31-R1 installer.