Frequently asked questions
FAQs
What is an audit software?
An audit software is a tool that helps auditors easily plan, create, and conduct audits. It also assists with report generation and tracking identified actions.
For which purposes can the Audit & Vendor Flow be used?
caralegal's Audit & Vendor Flow is designed for reviewing and assessing all data regulatory requirements. You can use the audit management software to ensure compliance with data privacy regulations, information security, or AI governance. It supports both internal audits and external third-party assessments.
What is an audit finding?
An audit finding is a result or observation made during an audit review that indicates non-compliance with a specific audit criterion or policy. It may also be referred to as a deviation, deficiency, non-conformity, or issue.
What is an audit questionnaire?
An audit questionnaire is prepared before an audit takes place. Auditors or examiners use it to ensure all necessary information is collected and all relevant questions are addressed. In the caralegal Audit Flow, an audit questionnaire is first designed and can then be used for one or multiple audits.
What is a building block, and what types are there?
Building blocks are components used to create an audit questionnaire in the caralegal Audit & Vendor Flow. These consist of predefined question types (e.g., multiple choice) or building blocks (e.g., headings, groupings) that help organize and structure the questionnaire.
Can I use if-then logic in my questionnaires?
Yes. With if-then logic or branching logic, you can design a questionnaire that adapts to the participants' responses. When a participant gives a specific answer, the follow-up question is determined based on their previous response.
What audit templates are available?
We offer a range of audit templates that you can customize to your needs in the caralegal Audit & Vendor Flow. These include GDPR gap analysis, various quick checks for departments (HR, marketing, etc.), maturity assessments, and vendor checks. Additionally, we provide templates for ISMS, NIS2, and DORA. Our team is happy to discuss your specific requirements with you.
Can questionnaires be sent to external third parties?
Yes, with the Audit & Vendor Flow, you can send questionnaires to third parties via email.
Which audit methods are supported?
Our audit software offers two common audit methods:
Interviews: In this method, employees or responsible parties from the audited company are interviewed by the auditor to gather information on processes, procedures, workflows, and other aspects being audited. The auditor can record responses and notes directly in caralegal.
Self-assessment: In this method, the audit questionnaire is sent to the respondents or external third parties, who complete it independently. The auditor receives the aggregated responses displayed in the audit software.
Assessments are used for all types of internal compliance reviews. They allow you to create checklists, for example, for onboarding new vendors, which can be completed by departments. Unlike audits, assessments do not require setting a specific scope, offering greater flexibility for regulatory processes within the company.
What does the template editor do?
The template editor allows auditors to create questionnaires using predefined building blocks and if-then logic. The editor offers various formatting options to help you design clear and consistent audit questionnaires.
