ControlMap

ControlMap is a web app (with optional desktop agent) for IT governance teams who are drowning in audit evidence, control mapping, and constant “prove it” requests. It centralizes controls (ISO 27001, SOC 2, NIST, HIPAA) and links them to real evidence sources like ticketing systems, cloud logs, IAM exports, and policy repositories. The app doesn’t pretend to replace GRC suites; it focuses on the messy middle: keeping evidence current, traceable, and review-ready. An AI layer helps classify uploads, suggest control-to-evidence mappings, and flag stale or contradictory artifacts, but every suggestion requires human approval. The desktop agent can collect local evidence (e.g., endpoint config exports) without manual screenshots. Output is simple: auditor-friendly evidence packets, change history, and a clear “what’s missing” dashboard.