Stage 3 · Conduct audit
Work every control in one register, capture what you're told as evidence you can cite, and see the shortfalls while there's still time.
The problem
Assessment is the part that actually needs your expertise, and it is the part most often interrupted: finding the evidence that backs a control, recalling what someone said in an interview last week, checking what the clause really requires. The judgment takes minutes. Gathering the context around it takes the day.
What Kimova does
You bring the judgment. Kimova brings the context to it, and keeps the record straight behind you.
You bringYour conclusion on a control
A finding raised in place, already carrying the requirement reference
You bringNotes from the interview you just ran
Dated, attributed testimony cited against the controls it informs
You bringThe client's policy set
Shortfalls split into addressed-but-insufficient and not-addressed-at-all
What it changes
No check-in call, no spreadsheet reconciliation — the register is the status report.
Evidence is attached at the moment of judgment, so you never reconstruct what a decision rested on.
Shortfalls surface while there is still time to act, which changes the audit from a verdict into a result you prepared for.
Walk us through one control the way you'd assess it, and we'll show you the same control in Kimova — evidence, notes and gap flags together.
Book a 30-minute walkthroughThe audit, end to end