Audit readiness for one part of your organisation (Show for)

How to pick a part

1. Open Audit.
2. Under Show for, pick a part. By default it says The whole organisation.
3. You see "Where this partial scope stands, control by control", with the verdict for that part on each control. The labels are the same as on the control itself, such as Covered or Excepted.
4. Back to everything? Click Back to the whole organisation.

You pick from the parts ECP judges on their own per control, such as Windows and Mac, or a split of your own.

One part is never your whole score

The top always says "Partial scope:" with the name of the part, and "not the whole organisation". This view shows no percentage. That is on purpose: a part that is in order says nothing about the rest of your company.

Not every control has a verdict of its own per part. Some apply only to the organisation as a whole, such as a policy. Those are not shown here. A sentence at the bottom says how many controls you see, and how many are left out.

What is not in order, the risks and the roadmap for that part

Above the controls you see three numbers: what is not in order yet, the risks and what is on the roadmap. Below them, in that order:

• Not in order yet: the controls where that part is not in order yet, worst first. Click one to see which devices or people it is about.
• Risks: first the risks chosen for that part, or for a group that shares devices or people with it. Then, under their own heading, the risks for the whole company. Those count here too.
• On the roadmap: the open roadmap actions for those risks, with their status and date.

A risk counts here once someone confirms it in the assessment. Until then it is listed apart, under the risks, as not confirmed yet.

The full list of controls for that part sits under All measures for and the name. Print opens it, so the printout keeps every control. The links Risk register for and Roadmap for open those pages on the same part.

Print or share

With Print and Download CSV you take it with you. The "Partial scope" label is also on the printout and on the first line of the CSV. That way nobody later reads it as the state of your whole organisation.

Being updated

If ECP is working out your scope again, you see Being updated instead of a verdict. Come back a little later. If the update fails for a day, or three times in a row, you see the last verdicts with "Not final: the figures could not be fully updated. We try again automatically."