Even when at Secfix we are doing our best to automate everything we can, besides automated checks, to become compliant with ISO 27001, your auditors will ask you to submit some fresh manually generated evidence (screenshots, files, etc.)

Example: Documents related to Product, HR, Sales, and Marketing, etc.

In early 2022 you might remember gathering the data, uploading it to your Google Drive and adding URLs to your Manual Evidence Upload Tasks Google Sheet.

On the Task Page under Documents (old: Manual Tasks), you will be able to upload the documents that are required as proof of your ISO 27001 implementation in order to pass the audit. The requests to upload the manual evidence as proof might come from Secfix or your auditor directly. You can consider these tasks as requests for proof.

To complete a request, click "Add" on the respective row, or click don't the row to display additional details about the request. You can add as many documents or links as needed to each of the requests.

Some of the requested documents may not apply to your specific company or tech stack. If that is the case, you can mark the request as "not relevant" and explain the reason.

Once you have all the evidence uploaded on the platform, Secfix will be able to generate a full and updated ISO 27001 Report that you can use during your stage 1 and stage 2 audits. (see screenshot, ignore the wording, it's a dummy)