---
title: "Assessment management"
canonical: "https://auditbadger.com/features/assessment-management/"
last-updated: "2026-10-07"
---

# Assessment management

Formal compliance assessment workflows for internal audits, control effectiveness testing, gap analyses and certification audit prep, with structured stages, evidence tracking, hierarchical control rollup, and PDF, CSV and Excel export for auditor handoff.

## What it does

| Capability | Detail |
|---|---|
| **Assessment lifecycle** | Four-stage workflow: **Planning → In Progress → Review → Completed** |
| **Scope and focus** | Scope the assessment by section or by implementation status |
| **Per-control results** | Compliance status per control: **Compliant / Compliant with Recommendations / Partially Compliant / Non-Compliant / Not Applicable / Not Assessed** |
| **Sub-control rollup** | Sub-control results automatically roll up to parent controls |
| **Evidence in context** | Each control's current evidence is shown alongside its result; files uploaded during the assessment become control evidence, available in the next assessment |
| **Findings documentation** | Document gaps, observations, and recommended actions per control |
| **Export** | PDF assessment report, plus CSV and Excel export of full results for auditor handoff |
| **Audit trail** | Every status change and evidence attachment is timestamped and attributed |

## Common assessment types

- SOC 2 readiness assessments ahead of your Type II audit
- ISO 27001 internal audits and Stage 1 / Stage 2 prep
- Internal compliance reviews and gap analyses
- Control effectiveness testing

## Workflow

1. **Plan**: define scope and focus areas, filter controls
2. **Execute**: assess each in-scope control, document findings, attach evidence
3. **Review**: move to review once every in-scope control is assessed
4. **Report**: export a PDF report or Excel file for auditor handoff or stakeholder reporting

## Useful links

- Book a demo: [cal.com/mlitwiniuk/live-demo](https://cal.com/mlitwiniuk/live-demo)
- Pricing: [/pricing](/pricing)
- All features: [/features](/features)
- Compliance management (control hierarchy): [/features/compliance-management](/features/compliance-management)
- Vendor assessment (separate module): [/features/vendor-assessment](/features/vendor-assessment)
- SOC 2 deep dive: [/compliance/soc2](/compliance/soc2)
- ISO 27001 deep dive: [/compliance/iso27001](/compliance/iso27001)