The Evidence module is a central register of the documents and records that demonstrate how your SAMA sub-controls are satisfied - policies, procedures, configuration exports, logs, screenshots, and similar artefacts.
Why a central register
Recording evidence in one place means that during a SAMA review you can point to the exact artefact supporting each control, rather than searching across mailboxes and shared drives. Each evidence record can be referenced from the controls you maintain on the Sub-Controls page through their evidence notes.
Working with evidence
- Capture a title, description, and status for each piece of evidence.
- Reference the control or audit the evidence supports.
- Keep the register current as documents are revised, so audit preparation is a review rather than a scramble.
Maintaining evidence requires the Admin role or the sama.edit permission.