ISO 27001:2022 readiness checklist
A practical sequence for scope, risk treatment, Annex A applicability, evidence and internal audit.
Available in the product knowledge baseResources
Field notes for people who own the controls
Practical guidance on compliance engineering, evidence quality, Microsoft integration and the responsible use of AI in security programmes.
Designing automated control tests
How to version tests, capture execution context and avoid ambiguous pass/fail results.
Available in the product knowledge baseBuilding a defensible evidence library
Versioning, approval, expiry and linking evidence to controls without duplicating artefacts.
Available in the product knowledge baseMicrosoft Graph permissions, explained
Separating Entra ID, Intune, Defender and M365 permissions with least privilege in mind.
Available in the product knowledge baseAccess review programme design
Campaign scoping, reviewer assignment, exception handling and remediation tracking.
Available in the product knowledge baseAI in compliance: guardrails that matter
Tenant isolation, retrieval grounding, confidence scoring and human approval gates.
Available in the product knowledge baseDocumentation and API reference
The OpenAPI schema is served by the API gateway at /openapi.json when documentation is enabled. Deployment, backup and recovery procedures are maintained in the repository.
See AUREXIS on your own controls
Start with the framework library, connect Microsoft 365, and watch control tests run continuously.