AI Footprint
All roles

Health, safety, environment and risk manager

Which controls can I evidence as operating, and which are only designed?

  1. Step 1. Risk and controls register

    Record which controls exist, which operate and which have been independently tested.

    Produces: Controls register
    Open this step
  2. Step 2. Disclosure readiness

    Check the risk management and assurance expectations that sit above the controls.

    Produces: Risk management evidence position

    What this surfaces is usually owned by someone else. Hand the gaps to your sustainability or esg lead.

    Open this step
  3. Step 3. Evidence pack

    Produce the register in a form an auditor can trace.

    Produces: Evidence pack
    Open this step
You finish with: Controls register with effectiveness, owners and citations

Your answers are held in this browser only. They are not sent to us and do not follow you to another device. Export the evidence pack to keep a copy.

Build the evidence pack