Overview
Use the Download-Only Audit Experience if you plan to complete your audit outside of Drata but still want to access your control evidence and audit data through Audit Hub.
This feature was created for people who plan to conduct their audit outside of Drata, but still want to use Drata’s downloads available in Audit Hub. This feature allows the customer to create an audit in Drata and select their own samples, without relying on an auditor to select these samples for them.
Prerequisite
You must have Administrator or Information Security Lead permissions.
Confirm that your framework and audit period are defined before creating your audit.
Step 1: Create a Download-Only Audit
Go to Audit Hub in Drata.
Select Create Audit.
Choose Download only when prompted.
Conduct audit in Drata: This first option creates a collaborative audit (with auditor participation).
Download only: The second option, Download only lets you control audit sample selection and manage evidence downloads.
Step 2: Configure Audit Details
Enter your audit name and description (optional).
Choose your framework (for example, SOC 2, ISO 27001, or HIPAA).
Define the audit period (start and end dates).
Step 3: Select Audit Samples
Choose your audit sample dates.
This step is where you’ll need to collaborate with your auditor, as this is usually selected by your auditor.
The sample dates must fall within your audit period.
Select the personnel and assets that correspond to the audit sample dates .
You can edit sample selections after the audit is created.
Step 4: Review and Create the Audit
Review your framework, date range, and selected samples.
When ready, select Finish.
Drata is generating your audit environment and preparing your evidence package.
Step 5: Download Control Evidence
Sometimes the audit package and control evidence take a little while to download, as they contain a lot of information.
Feel free to go about your work while it’s generating; we will send the person who created the audit an email once the downloads are generated and ready to be downloaded.
To download Control Evidence:
Open your audit in Audit Hub.
Under Audit resources section, select Download or Request evidence for Control evidence.
Drata creates a single
.zipfile that includes:All control evidence
Audit metadata and mappings
An interactive evidence manifest
You’ll receive a download link by email when your evidence package is ready.
To learn how to open and use the evidence package, view Understand and Use the Evidence Package Manifest.
Troubleshooting
Issue | Resolution |
Audit download is taking a long time | Large audits with extensive evidence may take longer to package. You’ll receive an email once it’s ready. |
Evidence package fails to download | Re-run the download from Audit Hub. If issues persist, contact Drata Support. |
Missing samples or evidence | Confirm the selected sample dates fall within your audit period. |