ExportableProof — Routines today. Proof tomorrow.

Evidence

Corrective Actions Register

Define the required structure for tracking nonconformities, corrections, root causes, corrective actions, effectiveness checks, ownership, deadlines, closure and evidence.

Back to demo

OSCAL source · CAR

{
  "artifactId": "CAR",
  "iso": [
    "7.5"
  ],
  "catalog": [
    {
      "iso": "7.5",
      "oscalId": "iso27001-7.5",
      "title": "Documented information",
      "className": "iso27001-clause",
      "group": "Support"
    }
  ],
  "profileAlters": [
    {
      "control-id": "iso27001-7.5",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
            },
            {
              "name": "implementation-status",
              "value": "always-in-scope"
            }
          ]
        }
      ]
    }
  ],
  "components": [],
  "sspImplementedRequirements": [
    {
      "control-id": "iso27001-8.3",
      "props": [
        {
          "name": "iso-id",
          "value": "8.3"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Risk Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "RTP"
        },
        {
          "rel": "cites",
          "text": "SOA"
        },
        {
          "rel": "cites",
          "text": "CAR"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-9.2",
      "props": [
        {
          "name": "iso-id",
          "value": "9.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Internal Auditor"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "IAP"
        },
        {
          "rel": "cites",
          "text": "CAR"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-10.1",
      "props": [
        {
          "name": "iso-id",
          "value": "10.1"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "ISMS Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "CIL"
        },
        {
          "rel": "cites",
          "text": "CAR"
        },
        {
          "rel": "cites",
          "text": "WIR-S1"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-10.2",
      "props": [
        {
          "name": "iso-id",
          "value": "10.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "ISMS Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "CAR"
        },
        {
          "rel": "cites",
          "text": "IAP"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    }
  ]
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…