Step 3 of 4

Review the control set

Confirm the controls this engagement will be audited against. Anything left unanswered is recorded as an unknown rather than assumed compliant.

Control framework Determines which controls appear in the audit log.

Control owner

Every model decision is loggedRequired for AU-6 audit review. Data stays inside the client boundary Air-gapped deploymentLeave unchecked if unconfirmed — it records as an unknown.

Coverage

62%

18 of 29 controls answered. The remaining 11 will be recorded as unknowns in the current-state assessment.