iso-27001-evidence-collection

Automate ISO 27001 evidence collection by using API-first CLI commands to retrieve access control and logging data from GCP, Azure, AWS, and GitHub, organizing the output by control ID. This produces timestamped, auditor-ready packages.

Map SOC 2 audit evidence to ISO 27001 controls by collecting data across cloud platforms and automatically organizing the artifacts according to ISO 27001:2022 control IDs. This ensures both frameworks share validated, timestamped compliance packages.

Detect compliance gaps automatically before an ISO 27001 audit by using the optional MCP server for continuous validation. If unavailable, the system falls back to embedded checklists and CLI command references to ensure evidence completeness.

Validate audit evidence freshness and format for ISO 27001 by running built-in validation steps that check data completeness and recency. This process culminates in an evidence package index to confirm auditor readiness.

Yes, the evidence collection process supports GitHub IAM policy retrieval through specific API-first CLI commands. You can systematically collect necessary access control evidence for control A.5.15 by executing the designated GitHub command.

CLI commands for SOC 2 evidence collection require proper API access configuration across cloud platforms and rely on an optional MCP server for automated gap detection. Without the server, validation falls back to manual embedded checklists.