A real methodology, not a spreadsheet with checkboxes.

Each framework has its own phased methodology that mirrors how assessors actually work. For IRAP: Plan and Prepare, Define the Assessment Boundary, Assess the Controls, Produce the Report. CSP, Essential 8, NIST CSF, and other supported frameworks each follow their own tailored structure. Every step an assessor needs to complete is captured within the workflow. Nothing happens outside of it.

• Capture engagement details, team roles, milestones, and methodology upfront
• Define the boundary: classification, environments, stakeholders, external services
• Assess controls through multiple organised views, not one flat list
• Produce reports with narrative sections alongside auto-populated control data