We’ve released a set of highly requested improvements to the Audit module designed to make audit preparation faster, clearer, and easier for MSPs managing client compliance. These updates help you cut manual work, reduce audit back-and-forth, and provide auditors exactly what they need in a format they understand. Here’s what’s new:
Import Evidence Automatically When You Start an Audit
You can now choose a start date when creating an audit and automatically import all relevant evidence from that period. You decide what to include:
What you'll learn
- Evidence documents already linked to framework objectives
- Linked action items from the same date range
This helps improve the workflow, saving manual work and ensuring everything is neatly pulled in at the beginning of the audit.
CMMC-Specific Improvements: Sub-Objectives in Audit
CMMC assessors don’t score the top-level objectives. They score the sub-objectives. ControlMap has supported this workflow for years, making it a popular choice in the CMMC community. That unique sub-objective workflow has been added to the audit feature set.
You’ll now see linked sub-objectives directly within the audit, making it easier to prepare clients for how assessors actually evaluate their environment. Nothing gets lost at the high level, and you always know exactly what mapping reviewers will look at.
Some additional CMMC enhancements include CUI mapping within the Assets tab, the Additional Artifacts feature within audit and look for updates to CMMC 2.0 to include new content from the CMMC 2.13 assessment guide for Level 1 and Level 2.
Preview as Auditor
This was one of the most requested audit features within the community. You can now preview the audit exactly as your auditor will see it.
This helps you catch gaps early, verify your evidence layout, and walk into the assessment confident that everything is clear and easy to review.
Better Control of Scope
Two improvements make defining and adjusting scope far more flexible:
- Scoped Requirements: Choose whether to include all in-scope requirements or select specific ones when creating an audit program.
- Update Scope: Update the scope for one or multiple audit programs at any time without recreating anything from scratch.
Manage Artifacts at the Program Level
You can now map and un-map artifacts such as documents and reports directly at the program level. This makes it simpler to standardize your audit packages across clients and frameworks, and is particularly useful for CMMC, where large reports such as the SSP or SPRS score, may need to be included at the framework or top level.
Directly Attach Evidence to Requests
A new option lets you upload evidence files directly within an audit request. No more jumping between sections to attach supporting documents.
Evidence Document Enhancements
Evidence documents can now be attached directly to requirements from within the audit. This provides you a streamlined workflow when preparing for internal or third-party reviews.
Additional Improvements
- Question History: Review the full history of assessment questions for better audit traceability.
- User Limit Increase for Free Plan: Free accounts now support up to 2 admin users.
- Collapsible Menu: Previously available only on Pro, now available for Free and Essentials plans for easier navigation.
What This Means for MSPs
These enhancements make it easier to
- Prep clients for audits with less manual effort
- Align more accurately with CMMC assessor expectations
- Standardize audit workflows across frameworks and clients
- Give auditors a clean, professional review experience
- Reduce the time from audit kickoff to completion
If you’re already using the Audit module, these updates are live in your account. If you’re considering offering audit support as part of your compliance services, this release gives you a stronger, more efficient foundation to build upon.
For more details on updates made in ControlMap, view the full release notes.