Staff acknowledge the policies and procedures that put controls into practice

What an auditor asks for

An assessor samples staff and checks that they acknowledged the current policies that describe how controls are carried out.

• Policy acknowledgement export
• Current policy set

Evidence ShipReady collects for CC5.3

ShipReady maps CC5.3 to the engineering signals below. A control with no collected artifact stays a gap until an evidence run produces one — never an assumed pass.

• Policy documentpolicy-docs

Common gaps

• No artifact has been collected yet — ShipReady records the CC5.3 control as a gap until an evidence run produces one, never as an assumed pass.