The readiness of your controls, requirements, and framework is determined by several factors, including the relevance of a linked item from Evidence Library or piece of miscellaneous evidence. The relevance of an item is determined by the renewal date. When a piece of evidence has exceeded its renewal date, the associated control will be no longer be ready. Ensure to review the evidence by the evidence renewal date and continue to updated the evidence to meet compliance requirements.
Prerequisites
Admins, Information security leads, Workspace managers, Control Managers, and DevOps Engineer have access to this section within Drata.
View and add renewal date
When adding a piece of evidence, you can also set a renewal date. For details about adding evidence, see the Evidence Library help article.
For each piece of miscellaneous evidence associated with a control, you must set a renewal date. By default, the renewal date is set to one year from the creation date. You can choose from a list of predefined timeframes or select a custom date using the date picker. You can edit the renewal date at any time.
Go to the Evidence Library and select an evidence item.
Use the filters to find the evidence you need.
The status filter has these options: Needs attention, Upcoming renewal, and Ready.
In the Current artifact section, you can:
View the list of existing artifacts.
Add new artifacts.
Update the creation and renewal dates for any artifact.
Miscellaneous evidence
Go to the Controls page and select a control.
Scroll down to the CONTROL EVIDENCE section and select Add for Miscellaneous evidence.
The renewal date displays on the evidence line item in the control drawer.
Evidence that is passed its renewal date will be indicated by an alert icon. To remedy this, you can update the renewal date (if that evidence is still relevant) or replace the file/URL with a new one.
