Module three — owner and cadence — was the piece we skipped for years. Assigning named humans felt awkward politically, but it stopped the shared-inbox dead ends.
Naomi R. · IT governance · Birmingham
Flagship programme
Evidence Mapping Workshop
A two-day intensive for United Kingdom teams who need a defensible map of controls, owners, and artefacts before fieldwork begins.
What you will leave with
- A scored control-family view inside the audit readiness assessment app
- Named owners and refresh dates for every critical artefact
- A backlog ordered by auditor exposure, not internal politics
- A short script for explaining amber scores without apology theatre
Informational pricing
Most teams book this workshop as part of Mapping Atelier at £2,150 for up to six participants. Solo attendees may join open cohorts when seats appear — enquire for the current figure.
No payment is taken on this site. See refund terms before you enrol.
Modules
- Inventory without vanity Pull policies, tickets, screenshots, and logs into a single working set. Duplicate and stale items are retired on day one.
- Control-family scoring Use the assessment app to grade each family. Instructors challenge green scores that lack primary evidence.
- Owner and cadence design Assign humans — not shared mailboxes — and set refresh intervals that survive holiday cover.
- Auditor-facing narrative Draft the one-paragraph story for each amber or red family so planning calls stay short.
- Backlog export clinic Produce a CSV and a visual map your PMO can track without learning the full app.
Instructor
Amira Cullen
Amira spent a decade in UK external audit and internal controls before founding the workshop curriculum. She still co-scores assessment exports with every cohort and refuses to mark a family green without a retrievable artefact.
FAQ
Do we need the assessment app beforehand?
Helpful but not mandatory. Orientation can run on the morning of day one. Teams who score a draft export first move faster through module two.
Is this suitable for first-time auditees?
Yes, provided you can bring real artefacts. Pure beginners without any document store will struggle — that is a real limitation of the format, and we will say so on the scoping call.
Remote or in person?
Both. In-person sessions in the United Kingdom need a room with wall space for mapping. Remote sessions use a shared board we supply.
How many people should attend?
Four to six is ideal. Beyond eight, critique time collapses and the assessment scores become shallow.
Workshop reviews
Strong on mapping, lighter on technical logging evidence. We still needed our SIEM lead after the workshop. Worth knowing that up front.
Client in healthcare operations · Newcastle