The readiness of your controls, requirements, and framework is determined by several factors, including the relevance of a linked item from Evidence Library or piece of miscellaneous evidence. The relevance of an item is determined by the renewal date. When a piece of evidence has exceeded its renewal date, the associated control will be no longer be ready. Ensure to review the evidence by the evidence renewal date and continue to updated the evidence to meet compliance requirements.
Prerequisites
Admins, Information security leads, Workspace managers, Control Managers, and DevOps Engineer have access to this section within Drata.
Add renewal date
When adding a piece of evidence, you can add the renewal date. To learn more about adding a piece of evidence, refer to Evidence Library help article.
For each piece of miscellaneous evidence associated with a control, you are required to set a renewal date. When setting a renewal date, the renewal date default to 1 Year from the creation date. You can also select from a list of timeframes or select a custom date using the date picker. The renewal date can be edited at any time.
Go to Evidence Library and select an evidence.
On the Evidence drawer, under the Artifact section, add a piece of evidence (or source).
Then you can enter the creation date and renewal date.
View renewal date
Navigate to the Evidence Library page. Filter the table to one of the following status: Ready, Upcoming renewal, or Past renewal.
The following screenshot showcases an evidence that is ready that has an renewal date.
You can also view the renewal date within the evidence drawer and under the Artifact section and under the current versions or past versions select the dropdown to view more information.
To learn more about Evidence Library, go to Evidence Library.
Miscellaneous evidence
Go to the Controls page and select a control.
Scroll down to the CONTROL EVIDENCE section and select Add for Miscellaneous evidence.
The renewal date displays on the evidence line item in the control drawer.
Evidence that is passed its renewal date will be indicated by an alert icon. To remedy this, you can update the renewal date (if that evidence is still relevant) or replace the file/URL with a new one.
