Data & Evidence
Evidence should be a query, not a screenshot. This track covers collection pipelines, control health metrics, drift detection and audit-grade integrity.
9
rooms
1995
total XP
8h
est. time
What you'll be able to do
- ›Design an automated evidence collection pipeline
- ›Stand up continuous control monitoring with alerting
- ›Query compliance data with SQL and publish control health metrics
- ›Prove evidence integrity and chain of custody to an auditor
Rooms
Evidence Pipelines
Collect, normalize, timestamp and store control evidence automatically.
Continuous Control Monitoring
Move from point-in-time testing to always-on monitoring with alerting and drift detection.
SQL for Compliance Data
Answer auditor questions with queries: coverage, exceptions, aging and control health metrics.
Evidence Integrity & Chain of Custody
Hashing, canonical payloads, immutable storage and the run metadata that lets an auditor re-derive an artefact you collected nine months ago.
Control Health Metrics & Scorecards
Coverage, freshness, pass rate and exception aging, and the denominators that turn a reassuring dashboard into a lie.
Drift Detection & Alert Design
Declared state versus observed state, detection latency, suppression windows, and alerts a human can actually act on at 3am.
Vendor Risk Automation
Tier vendors by the data they actually touch, turn questionnaires into scored data, and ingest vendor evidence on a schedule instead of chasing it by email.
Fourth-Party & Supply-Chain Visibility
Your vendors have vendors. Map subprocessors, convert contract clauses into testable controls, and monitor the chain you cannot see.
Data & Evidence Capstone
Design the evidence architecture for one control family end to end: collection, integrity, monitoring, metrics and the auditor's read view.