Controls mapped to the Trust Services Criteria
Governance and policies, risk, access control, monitoring, vulnerability and change management, vendors, backup and recovery, data protection and audit evidence.
- Owner, due date, status and notes per control
- Evidence files and links with validity dates
- Readiness score by area with clear bands
