Scattered
The answer to one audit question sits in three tools and two inboxes. Nobody owns collecting it.
Solution · By Challenge
Audit & Compliance Pressure
Audits rarely fail on the controls. They fail on the evidence: who owned the asset, what was patched, who approved the change, who logged in. Autointelli keeps that evidence as a by-product of running IT, so an audit is an export, not a hunt.
- Recordas you operate
- Mapto the controls
- Exportwhen asked
The auditor's listSix typical requests · sample data
0 of 6requests answered
The problem
Evidence goes missing in three ways
The work was done. Proving it is where the pressure comes from.
Stale
Spreadsheets are out of date the day they are saved. By the time an auditor reads them, they describe last quarter.
Unproven
You can say a control works, but you can't show who did what, when, or which controls have nothing behind them at all.
Where the pressure comes from
Six gaps, and how each one is closed
Nobody can say what we own
How it goes wrongAn asset list that was accurate the day someone saved it, with owners nobody has confirmed.
Closed withIntelliAsset keeps the register from discovery and agents, with custody and transfer logs and physical verification campaigns. The Master IT Asset Register maps to Annex A 5.9.
Patch status is a guess
How it goes wrongEach machine has its own answer, and nobody can show the fleet.
Closed withPatch Compliance Summary, Critical Vulnerability Exposure and Patch Deployment Change Log, mapped to control 8.8, with a compliance score per device.
Who did what is unclear
How it goes wrongLogs live on individual servers, and half of them were never kept.
Closed withAudit trails that name the actor, the action and the time: IntelliAsset's platform trail, ITDesk's system log, Securita360's hash-chained trail with recordings, and Unified360's alarm and run history.
Changes with no paper trail
How it goes wrongA change was made. Who approved it, and was it checked afterwards?
Closed withITDesk records each CAB approval with the decision, note and time, plus a post-implementation review. IntelliAsset logs patch deployments, and Unified360 compares config snapshots.
Evidence assembled by hand
How it goes wrongThe week before an audit disappears into exports, screenshots and pasted tables.
Closed withAn ISMS audit pack of 29 reports, exported as one bundle of PDFs with a manifest, plus reports that can be scheduled to email out on their own.
Gaps found by the auditor, not by you
How it goes wrongYou learn which controls have no evidence when someone else points at the hole.
Closed withA control coverage matrix lists every tracked control as covered or a gap, and uploaded evidence files, stored with a SHA-256 checksum, close gaps you tag to a control.
Evidence on demand
Build an evidence bundle, and see your gaps
These are the 29 reports in IntelliAsset's ISMS audit pack, with the controls each one maps to. Select the ones an audit needs and watch the control coverage change. Controls no report covers show as gaps.
1 · Choose the reports
The 15 core reports are preselected.
2 · Control coverage
ISO/IEC 27001:2022 Annex A controls the platform tracks. A gap is a control no report covers, and you can add uploaded evidence to close it.
Reports0
Controls covered0
Gaps0
3 · manifest.txt
Each selected report becomes a PDF in the bundle, listed with its controls.
Report names and control mappings are from IntelliAsset's ISMS audit pack. Selection and uploaded evidence here are illustrative.
Every platform keeps its own trail
Who did what, in each system
The answer to “who did that?” lives where the work happens, and each platform records it.
Platform audit trailIntelliAsset
Who changed a record, and from what to what?
- Actor, role, action and entity
- Old and new values for each change
- IP address, user agent and result
System audit logITDesk
Who did what on the service desk?
- Actor name, email and role
- Action, entity and IP address, with a timestamp
- CAB approvals by stage, and a post-implementation review
Hash-chained audit trailSecurita360
Can we prove the trail wasn't altered?
- Each event is chained to the one before it
- A scheduled integrity check raises an alert on a break
- Encrypted recordings, and SIEM export in CEF format
Alarm and run historyUnified360
What fired, and what did we do about it?
- Every alarm trigger and recovery
- Automation runs with the script version and approver
- Config snapshots you can compare line by line
Illustrative entries. Fields shown are what each platform records. Sample data.
See it live
Real screens from the platforms
Screens are from the products running test or sample data.
What changes
When evidence is a by-product
Audits become exports
The reports auditors ask for first already exist, and an evidence bundle is a few clicks.
You find the gaps first
The control coverage matrix shows which controls have no evidence before the audit does.
Named owners, dated changes
Every asset has an owner on record, and every change has an actor, a time and an approval.
Evidence that stays current
Evidence comes from the systems doing the work, and scheduled reports keep arriving on their own.
Built with
The platforms behind this solution
IntelliAsset
Asset and patch management
The ISMS audit pack, control coverage matrix, evidence repository, patch and asset reports, and scheduled reports.
ITDesk
IT service management
System audit log, CAB approvals, post-implementation reviews, and scheduled reports.
Securita360
Privileged access management
A hash-chained audit trail, encrypted session recordings and SIEM export.
Unified360
Operations and observability
Alarm and automation run history, config snapshots with diff, and scheduled reports.
Questions
Frequently asked
Does this make us ISO 27001 compliant?
No tool does that on its own. IntelliAsset produces evidence for the asset-management and technical controls it covers, mapped to ISO/IEC 27001:2022 Annex A, and the control coverage matrix shows the controls it doesn't cover as gaps. Deciding what satisfies a control is still up to you and your auditor.
Which controls do the reports cover?
Of the 33 controls the matrix tracks, 22 have at least one report behind them today, including asset inventory (5.9), user endpoint devices (8.1), technical vulnerabilities (8.8), configuration (8.9), logging (8.15), monitoring (8.16) and network security (8.20). The rest appear as gaps unless you upload evidence and tag it to the control.
What is in the evidence bundle?
A zip file with one PDF for each report you select, plus a manifest that lists each report and the controls it maps to. A default set of 15 core reports is preselected, and you can add any of the 29.
Can we upload our own evidence?
Yes. Evidence files such as VAPT reports, policies and audit reports are stored with a SHA-256 checksum and can be tagged to controls. Tagged evidence counts toward the coverage matrix.
Are the audit logs tamper-proof?
Not all of them are the same. Securita360's audit trail is hash-chained, so changing or deleting an older event is detectable, and events can be exported to your SIEM. IntelliAsset's and ITDesk's audit logs record who did what and when, including IP addresses, but they are not hash-chained.
Can reports be sent on a schedule?
Yes. IntelliAsset can schedule any report to email out on a timetable, ITDesk has report schedules with recipients and a format, and Unified360 can schedule daily, weekly or monthly reports as PDF.
Do you cover frameworks other than ISO 27001?
The report mapping today is to ISO/IEC 27001:2022 Annex A. Evidence files can be categorised as VAPT, ITIL4, CIS, policy or audit report, but other frameworks are not mapped control by control.
Where does the data live?
IntelliAsset is self-hosted, so inventory, documents and evidence stay inside your network. Securita360 and the other platforms can also run on your own infrastructure.
See it on your own audit
Find out which controls have nothing behind them
Tell us which framework you're preparing for and we'll show you the evidence Autointelli already keeps, and the gaps it shows. No commitment required.