What is AssureSphere360 Compliance Builder (CB-CORE)?

CB-Core is a single-file application designed to:

• help you plan and prepare for any type of audit or assessment (Proactive Evidence Building)

• help you provide the correct information and evidence during an actual audit (Compliance Management)

• help you incorporate best practices and lessons learned during Post Audit Tasks.

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​​

The system is designed to provide two specific deliverables.  The first are AssureCards.  Each auditor question has a corresponding  Assure Card.  Each card provides the question, an editable best practice answer, editable evidence recommentation that map directly to documents referred to as Domain Evidence Compliance Decks (DECDs), and framework mapping. All of this is editable and downloadable from the application.  A user simple places a checkmark in the queue box and all cards with checkmarks are prepared for emailing to the auditor.  This second major piece is the use of Domain 

 

**What are AssureCards?**  

AssureCards are essentially blocks of information that auditors may want to access. They represent specific audit questions tied to various control domains. For example, control domains include Asset Management, Cloud Security, Breach Management, Data Protection, and Risk Assessment. Currently, we have 2,408 actual audit questions spread across 61 domains, and we continue to expand this collection. Each question requires an answer, and each answer needs supporting evidence and framework mapping. We cover approximately 50 well-defined questions for each control domain. AssureCards are designed to facilitate searches based on specific audit questions. As you begin to type in your question, the AssureCard typically appears within seconds. At that point, you will have access to a modifiable best practice answer, a list of three to four evidence titles that substantiate your answer, and two to four regulatory framework mappings related to the Q&A set.

​

​

​

​

​

​

​

​

​

​

​

​

​

 

**What are Domain Evidence Compliance Decks (DECDs)?**  

DECDs are documents that represent actual evidence artifacts. They resemble sample documents, making it easier and faster to mark up a sample than to create a brand-new document from scratch. We handle the initial work, allowing you to modify these samples according to your specific needs. You can then use the modified samples as actual evidence. If an AssureCard recommends a particular type of document as evidence, it will indicate whether you have a sample available based on your DECD purchases. Each domain is supported by 25 to 50 actual document samples. For instance, the Access Management DECD provides 50 document samples to assist you in creating the evidence suggested by your AssureCard. You can purchase DECDs from the [KnowledgeAlign product matrix](https://knowledgealign.com/product-matrix).