Smarter Week

How to automate it

How to automate “collect evidence for SOC 2, ISO 27001 or other audits”

Here is the best way to spend less time on this, best first. Each comes with steps you can follow today.

90 min
typically, once a week
70%
of the time can be automated
A small project
to set up

Fix 1 of 1

Software feature

Let a compliance platform collect evidence automatically

Vanta, Drata and Secureframe connect to your cloud, identity and HR systems and check controls continuously, so most audit evidence is collected without screenshots.

Typically saves about 60% of the time8 h to set up
  1. 1Connect the platform to your cloud accounts, identity provider, HR system and code host.
  2. 2Map controls to your framework (SOC 2, ISO 27001, HIPAA).
  3. 3Fix the failing tests it shows, and assign owners for manual controls.
  4. 4Give your auditor access to the platform instead of evidence folders.

Tools: Vanta · Drata · Secureframe · Sprinto

Who does this task

Roles in our library that list this as one of their common tasks. Each guide covers the rest of that role’s week.

IT / Systems administratorSecurity analyst

HourLeak · the 8-minute work audit

How many hours does this cost you?

The free 8-minute check works out where your week goes and gives you your top fixes. The team scan does the same for everyone and adds it up, so you know which leaks to fix first.

Take the free check Scan my team, $49

Answers are anonymous. Leaders only see team totals.

Other common tasks for IT / Systems administrators