Campaign list
| Control | What it does |
|---|---|
| Open this quarter's campaigns nowButton | Administrators only. Creates this quarter's campaign for every connected portal instead of waiting for the schedule. |
| Open campaignButton | Opens the review for that portal and quarter. |
| Download evidence CSVButton | Available once a campaign is signed off. Downloads every decision with reviewer, timestamp and reason. |
Status badges read In progress while decisions are outstanding and Signed off once the reviewer has signed.
Reviewing a campaign
- 1Assign a reviewer from the drop-down. Only the named reviewer, or an administrator, can record decisions.
- 2For each person choose Keep access, Change access or Revoke access, adding a reason where useful.
- 3When every item has a decision, select Sign off. The sign-off is timestamped and immutable, and locks the campaign.
- 4Download the Evidence CSV, then generate the ISO 27001 and SOC 2 reports if you need narrative wording.
| Control | What it does |
|---|---|
| Keep accessButton | Confirms the person's current access is still appropriate. |
| Change accessButton | Flags that access should be reduced. Follow up in Provisioning, Moves. |
| Revoke accessButton | Flags that access should be removed. Follow up in Provisioning, Offboard. |
| Sign offButton | Reviewer only. Records the sign-off statement, totals and timestamp and locks the campaign. |
| Evidence CSVButton | Downloads the decision record for auditors. |
| GenerateButton | Creates the ISO 27001 policy or SOC 2 attestation wording from the campaign's aggregate results. Shows as Regenerate once a report exists. |
| Save changesButton | Saves your edits to the generated report. |
| Download .mdButton | Downloads the report as Markdown. |