Attach evidence to controls

Link a file to the control that it helps prove in a GRC evaluation.

One evidence supports the recorded response for a control. The available submission happens in the Evidence block within each evaluation control.

Do not use a general evidence page for this procedure. Sending it in this area is not available; to maintain the correct association, first open the control that the file proves.

What you will do

You will select a control, attach a compatible file and confirm that the evidence has been linked to the correct item.

Who can do this

Users with access to the evaluation and action Attach evidence presented in the control.

Before you start

  • Confirm that the correct organization and evaluation are open.
  • Identify the control to which the file should be associated.
  • Use JPG, JPEG, PNG, CSV, XLSX, DOCX or PDF files with up to 5 MB.
  • Remove or hide personal data, credentials, secrets and other information that is not necessary to prove control.
  • Do not use real data in images prepared only for demonstration or training.

Menu path

In the main menu, select GRC → Assessments → My assessments → choose the assessment → Open → locate the control → Evidence.

Steps

  1. Open the control that corresponds to the evidence that will be sent.
  2. Check the name and grouping of the control before selecting the file.
  3. In the Evidence block, select Attach evidence.
  4. Choose a file compatible with up to 5 MB.
  5. Wait for confirmation Attached evidence.
  6. Check if the file appears in the Evidence block of the same control.
  7. When you need to consult the content, use Download evidence.
  8. To remove an incorrectly associated file, select Delete evidence, read the confirmation Are you sure you want to delete this evidence? and only confirm after checking the control and the file.

Expected result

The file appears in the evidence list of the chosen control and Wasa presents the confirmation Attached evidence. When an exclusion is confirmed, the file no longer appears in the control and Wasa informs Excluded evidence.

Common problems

SituationWhat to do
The format is not allowedUse JPG, JPEG, PNG, CSV, XLSX, DOCX or PDF.
The file exceeds the limitReduce the file size to up to 5 MB and try again.
The file is empty or is invalidSelect a valid version that contains the necessary information to prove the control.
The sending failsConfirm the active organization, access to the evaluation and the connection. Then, try again on the same control.
The file was attached to the wrong controlDelete the evidence only if the action is available and then attach the file to the correct control.
The home page informs that the shipment is unavailableReturn to the evaluation and use Attach evidence within the corresponding control.

Related tasks