External Auditor Portal

This is the help text the console shows in the help panel on this page.

The Auditor Portal gives your certification body a time-limited, read-only view of your ISMS during the audit, without a full AutoCISO account.

Portal Link

• Click Generate Link, choose how long it stays valid (7, 14, 30 or 60 days; 30 is the default) and click Generate.
• Copy the link and send it to your auditor. It is shown only once, so copy it before you click Done.
• The page shows whether the link is Active or Expired and the days remaining. Click Regenerate Link to issue a new one if it expires before the audit is finished.
• The link works until it expires, so the auditor can come back to it during the audit.

Questions Inbox

Auditors can ask questions from the portal, optionally about a specific control. Questions appear in the Questions Inbox on this page as Unanswered or Answered. Click Reply, type your answer and click Send Response. The auditor sees it the next time they open the portal.

What Auditors Can See

Through the portal, auditors have read-only access to:

• An overview: controls assessed, compliant controls and policy count
• A risk summary (counts of high, medium and low risks, no asset details)
• Your policies
• For each control: its Statement of Applicability entry and the Evidence Vault items attached to it
• Their own questions and your answers

Security

Portal access is limited to the expiry you chose, and the portal never allows changes to your ISMS data.