Guides by role
Training kit: Auditor
A printable page: programme, checklist and exercises on a demo site.
Role: Auditor Duration : 40 min. Goal : Trace evidence from the control to the log and recount the pack outside the app.
Use Print (Ctrl+P or ⌘P) then "Save as PDF": the page is formatted for paper.
Before the session
- ☐ A demo Jira where the app is installed, with fictitious data (never your production site).
- ☐ An account that holds the role being studied.
Programme
| Time | Content | Pages |
|---|---|---|
| 10 min | What the role reads and exports | Roles and permissions |
| 15 min | From control to evidence and test | Controls, Evidence |
| 15 min | The audit log and the audit pack | Audit log, Audit pack |
Checklist
- ☐ I can follow a requirement to its dated evidence
- ☐ I can read the internal audit programme and its findings
- ☐ I can re-check a pack's fingerprints
- ☐ I know evidence files are not in the zip
Exercises on the demo site
- Pick an ISO 27001 requirement and follow it to a piece of evidence.
- Generate a demo audit pack and re-check one fingerprint with the command in LISEZMOI.txt.
- Find the "Audit pack generated" event in the log.
What the app does not do
It never says the organization is compliant; it removes no access in Jira; it sends nothing to the authorities. See the role guide for the limits specific to this role.
Was this page helpful?