Frequently asked questions

Auditor is a customizable web-based application that automates the FISMA audit lifecycle—from planning and scheduling through evidence tracking and reporting.

Auditor is designed for compliance, GRC, and security teams that need a repeatable way to plan, execute, and track FISMA audits across stakeholders and systems.

Yes. Auditor supports FISMA audit workflows for multiple systems and includes support for FA, NFR, and POA&Ms.

Auditor helps teams collect and organize artifacts through workflow automation, including automatic email parsing and artifact collection to reduce manual effort.

Yes. You can track findings and POA&Ms as part of the workflow so remediation status stays visible through reporting and dashboards.

Teams collaborate in a shared workspace with user management and role-based access, plus notifications that keep work moving without constant status meetings.

Access is managed with user management and role-based access controls (RBAC) so each stakeholder sees only what they need for their role.

Auditor supports SSO in a general, provider-agnostic way to simplify access for your organization.

Auditor is deployed on FedRAMP-authorized IaaS (AWS US East/West).