Search documentation

…r leasing, servicing consumer loans, or providing valuation or credit reporting services in connection with a purchase. A dealership that offers financing options at the point of s…

…maps each one to the specific language of every framework you need to report against. This means one piece of evidence, collected once, can simultaneously satisfy a requirement i…

Overview How evidence quality, freshness and source produce the confidence score. Documentation status This article is a concise reference. A fully expanded…

…ates at any point in time. These states are deliberately precise so a report never has to guess what a percentage actually means. The six states State Definition PASS Current e…

Overview The HIPAA Security Rule requires covered entities and their business associates to protect the confidentiality, integrity and availability of electro…

Overview Govern, Identify, Protect, Detect, Respond, Recover and the AssurIQ crosswalk. Documentation status This article is a concise reference. A fully ex…

Overview Controls insurers most commonly attest and how to prove them. Documentation status This article is a concise reference. A fully expanded guide for…

Overview Mapping strength, one-control-many-requirements leverage and coverage math. Documentation status This article is a concise reference. A fully expan…

Overview Versioned packs, upgrades and how history is preserved. Documentation status This article is a concise reference. A fully expanded guide for “Frame…

Overview Marking controls not applicable, scoping by site or system class. Documentation status This article is a concise reference. A fully expanded guide…

Overview Accepting residual risk with an owner, expiry and review. Documentation status This article is a concise reference. A fully expanded guide for “Ris…

Overview Scoped, read-only, time-limited access for assessors. Documentation status This article is a concise reference. A fully expanded guide for “Auditor…