policy compliance_error ai_generated true

SOC2 audit: evidence not available for control

ID: policy/soc2-evidence-missing

Also available as: JSON · Markdown
78%Fix Rate
82%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active — — —

Root Cause

SOC2 audit evidence gap for required control.

generic

Workarounds

  1. 90% success Implement automated evidence collection from day one
  2. 88% success Use GRC platform (Vanta, Drata) for continuous compliance monitoring

Dead Ends

Common approaches that don't work:

  1. Create backdated evidence 95% fail

    Audit fraud, legal liability

  2. Claim control not applicable without justification 82% fail

    Auditor will reject