Evidence Repository
Activate, document, and upload evidence items to prove operation of controls
Evidence Examples
View and learn from strong examples of common evidence items
Cloud Provider Evidence
Where to locate common evidence items on AWS, Azure, and GCP
Security Training Resources
Resources and links to security and compliance training modules
Articles
- Infrastructure evidence overviewHigh-level overview of networks, operating systems, databases, and applications
- ApplicationWhat we mean by “application” and how to satisfy the related evidence
- DatabaseWhat we mean by “database” and how to satisfy the related evidence
- Network/CloudWhat we mean by “network/cloud” and how to satisfy the related evidence
- Operating SystemWhat we mean by “operating system” and how to satisfy the related evidence
- VPNWhat we mean by “VPN” and how to satisfy the related evidence
- Attestation of non-occurrenceHow to satisfy a control if sample evidence is not available
- How to automatically collect evidence from AWS IAM for Administrator Access, User Access, and other evidence objectsUse Terraform integrations to automatically collect evidence for user access controls
- How to automatically collect redundancy information for Availability Zones and other related controlsUse Terraform to automatically collect evidence for redundancy and availability controls
- Evidence ownershipLearn your responsibilities as an evidence owner
- Attestation of non-occurrenceHow to satisfy a control if sample evidence is not available