Skip to content
AI R&D for your audit work, without building a team of your own. Become a Design Partner.Become a Design Partner.Apply to joinApply
Prufy
Login

Insights

Reference.

Reference material for fieldwork, with the clauses, the tests and the evidence each control leaves behind.

The questionnaire you send your suppliers is not evidence. How to turn it into proof.

A completed questionnaire is a supplier's statement about itself. NIS2 asks you to assess the effectiveness of the measures, not to collect them in writing. Six changes that turn the annual send into a control that holds.

3 min read

The custom software nobody maintains. What to look at before it becomes a finding.

Every large organisation carries custom applications with no clear owner. Eight clauses for the next build and four tests the auditor can run on the ones already in production.

4 min read

The first 72 hours of a breach. What the organisation has to be able to show.

The GDPR clock starts when the organisation becomes aware, not when the forensic report confirms it. What the auditor tests on notification, the internal register and evidence of the decision.

3 min read

Eight criteria for evaluating an AI tool for audit.

Almost every platform promises to save hours. Eight questions that separate the one that survives a review from the one that just writes fast, for the team comparing vendors.

2 min read

Joiners, leavers and recertification. What the auditor has to be able to prove about access.

The access lifecycle is where findings repeat year after year. Four rules that hold the control up and the tests that leave evidence it works.

2 min read

Eight questions to order the technology risk universe before the plan.

Before allocating hours it helps to know where the exposure sits. Eight questions by area that the team answers in one session and that leave the annual plan resting on more than last year's inertia.

2 min read

Your audit intelligence belongs to you.

Request a demo

Designed around ISO/IEC 27001, ISO/IEC 42001 and SOC 2 and ready for certification.