The SAMA Audits module lets you plan and record assessments against the framework - whether internal self-assessments, formal SAMA reviews, internal audit cycles, or third-party assessments - and to track the findings each one raises through to closure.

The audit register

The audits page lists every audit with its type, status, date, and a findings count (total and open). Click New audit to plan one, choosing a title, an audit type, a date, and the scope.

Audit typeStatus
Self-assessmentPlanned, In progress, Completed, or Cancelled
SAMA review
Internal audit
Third-party audit

Audit detail

Open an audit to see its full record. The Edit action updates the status, assessor name and organisation, audit date, scope, summary, and overall conclusion as the engagement progresses.

Findings

Each audit carries a table of findings. Use Add finding to record one, and the edit (pencil) and delete (trash) actions on any row to maintain it.

FieldNotes
Finding refYour reference for the finding (required).
ClassificationNon-conformity, Observation, or Opportunity for improvement.
Control refThe SAMA sub-control the finding relates to.
DescriptionWhat was found (required).
Corrective actionThe agreed remediation.
StatusOpen, In progress, Remediated, or Closed. Moving to Remediated or Closed records the closure date automatically.
Due dateTarget date for the corrective action.

Adding and editing findings requires the sama.edit permission; deleting a finding requires sama.manage.