We’d like to be able to rename the policies in the Policies page.
During certification and surveillance audits, the auditor traces each control from the Statement of Applicability, risk treatment plan and prior audit reports to the governing document by its title, and then verifies identification, version control and approval under ISO/IEC 27001 clause 7.5. The renaming of our policies and management system in Secfix means the titles in our controlled documentation no longer match what the auditor sees in the platform. This forces us to demonstrate, during the audit, that the renamed document is the same approved artefact, that its approval and version history remain valid, and that staff acknowledgements against the original title still hold. That is an avoidable audit finding risk on document control, and it also breaks the evidence trail for our concurrent SOC 2 observation period. We need the platform to display our approved document titles, or at minimum a customer-defined display name alongside your framework mapping, so that what the auditor sees in Secfix is consistent with our documented information.
