Skip to content

Learn · Audit & evidence

The control crosswalk

Point a framework’s controls at the logbook entries that evidence them.

Checked against the product on · written for people who need the evidence

A framework holds controls. A control holds evidence links. A link points at a logbook entry and captures that entry’s hash, so the evidence is tamper-evident from the moment it is linked.

console.dmzagent.com/compliance

Prove

Compliance

1FrameworksControlsAttestationsEvidence
2
EU AI Act73%

38 of 52 controls implemented

NIST AI RMF72%

44 of 61 controls implemented

ISO/IEC 4200162%

29 of 47 controls implemented

SOC 280%

51 of 64 controls implemented

Figure. Framework coverage across four frameworks. The compliance screen with framework coverage bars and a control table showing owner, status and evidence count.

  1. Open Compliance and read the coverage per framework.1

  2. Select a framework to open its controls.2

console.dmzagent.com/checks/controls

Prove

Controls

1
ControlOwnerStatusLast testedEvidence
CC6.1 Logical accessdana@Implemented11 days ago14 links
CC7.2 Monitoringsam@Implemented4 days ago212 links
CC8.1 Change managementdana@In progress31 days ago3 links
2Every evidence link captures the logbook entry hash at the moment it was linked.
Figure. The control table, with owner, status, last test, and evidence count. The control table: control id, name, owner, status, when it was last tested and how many evidence links it has.

  1. Read the status and the evidence count on each control.1

    A control moves through not started, in progress, and implemented.

  2. Read the capture line.2

The reverse question

Given one logbook entry, the platform answers which controls it evidences. This is the question an auditor asks when they pick an entry at random.

GET/v1/compliance/evidence/{event_id}/controls

Lists the controls a single logbook entry evidences.

FieldTypeRequiredWhat it is
event_idstringYesThe logbook entry to trace.

Returns

{
  "event_id": "ev_01HZX…",
  "controls": [
    { "control_id": "ct_01HZ…", "ref": "CC7.2", "framework_key": "soc2" }
  ]
}
curl 'https://api.dmzagent.com/v1/compliance/ledger/EVENT_ID/controls' \
  -H 'Authorization: Bearer YOUR_API_KEY'
Ask the assistant to wire this in →Open your organization