Client Guide
Start with a risk assessment, then work through the controls it uncovers. This guide covers the day-to-day tasks inside the platform.
IT environment: integrations, inventory, size
The three tabs that describe your organisation: Microsoft 365, EDR, and Aikido connectors; the inventory; size and what falls outside NIS2
Accounts and employees
Why Microsoft 365 accounts and your people are two numbers, where to confirm them, who can, and how a group can define your employees
Scope: what counts for your audit
Security groups, the Applies to line on a control, and why an exception never turns a control green
- The order of work: groups, assessments, register
- Making groups (for example "Engineers")
- Recording an exception: reason, end date, what you do instead
- Scope questions on your dashboard, and "Being updated"
- Evidence per group, and a control that applies to one group only
- Audit readiness for one part (Show for)
- One device seen by several tools
- Access per part: limit a member to some groups
- Also in Nederlands · Français
Connecting Aikido Security
Wire AppSec findings (code vulnerabilities, leaked secrets, container scans, cloud posture) into the audit-readiness report
Connecting Google Workspace
Read-only access through domain-wide delegation, without a key. Also in Nederlands and Français on the page.
ECP MCP server: connect Claude, ChatGPT, Copilot or Cursor
Server URL, steps per AI app, what the AI can and cannot do, and how to disconnect. Also in Nederlands and Français on the page.
Connecting NinjaOne Backup
Wire backup jobs and restore tests into the audit-readiness report. Three-step API app setup that catches most NinjaOne 404s.
Risks: groups, assessments, register, roadmap
Choose your security groups, run one assessment per group, keep the register per group, plan actions on a sprint Kanban (CCB 1 to 5 maturity scoring lives on Audit)
Documents (Wiki)
Browse policies, procedures, and reports in the split-pane document tree
Audit
Per-control CAB readiness, CCB 1 to 5 maturity scoring, snapshots, and history
Registers
Risk, incident, training, backup-test and more: populated registers auto-contribute evidence to Audit
Working Through Controls
Understand what each control asks for and how to mark it complete
Generating Policy Documents
Use the policy wizard to create GDPR- and NIS2-aligned documents
Attaching Evidence
Attach typed artifacts (policy, log, config snapshot) with scope and expiry from each control's Evidence panel
Exporting for your CAB auditor
Produce the CCB CyFun workbook (xlsx) or a full evidence bundle (zip) for audit submission
Patch AI Assistant
Ask compliance questions, search your wiki, and let Patch propose changes
Search (Cmd+K)
Find any page, control, or action instantly from anywhere