Introducing Control-Level Audit Assessments Directly Inside Vanta for Faster, Transparent Audits
Audits: More speed, transparency, and fewer surprises
Audit teams can now assess controls directly inside Vanta, no spreadsheet detour required. Open an audit > Controls tab > New Auditor Assessment column.
Up until now, Vanta only supported evidence-level review, so auditors working frameworks like ISO 27001 or FedRAMP had to export everything to a spreadsheet just to write up their findings. Clunky, easy to lose track of, nobody's favorite.
Auditors can now formally assess controls; complete with justification; right inside Vanta, on internal and external audits alike:
Framework-specific statuses that actually make sense (Conforming / Minor / Major Non-Conformity for ISO; Satisfied / Not Satisfied for FedRAMP & NIST 800-53)
Every assessment comes with a written justification, saved right on the control as a comment
Change your mind? Assessments stay editable until the audit is marked complete
Only the auditors assigned to the engagement can make the call
Evidence and control assessments, finally living under one roof. Less back-and-forth, zero spreadsheet shuffle.
Availability: Professional, Enterprise (with Compliance & Audit Management [GRC])
