Financial Services Financial Promotions Tipping-Off & AML Client Confidentiality MNPI & Market Abuse Suitability Forward-Looking Antitrust
Evidence Pack

Proof that the control operated, not just that it exists.

A period report you can hand to an auditor, a regulator, or a client's security questionnaire: what was analyzed, what was flagged, and what happened to it, mapped to ISO 27002 controls.

Book a demo → See the audit trail
The problem

Most programs can show intent, not operation

A policy document proves you decided something. A training completion report proves people attended. Neither proves that anything was prevented. The evidence pack answers the question an auditor actually asks: over this period, did the control run, and what did it do?

What it contains

Four sections, one period

1
Coverage
How many messages were analyzed, on which platforms, over the selected week, month or quarter.
2
Risk by category
What was found, grouped by category and ranked, so the pack shows exposure rather than a single number.
3
Severity
Critical, high and medium findings, separated.
4
Resolution
What happened to each finding: rewritten, removed, or kept. Including what was kept, because a report that only shows successes is not evidence.
Control mapping

Where it fits in your framework

The pack is built to sit under three ISO 27002:2022 controls: A.5.14 Information Transfer, A.8.12 Data Leakage Prevention, and A.6.3 Security Awareness, Education and Training. We publish the mapping so your auditor can judge it directly rather than take a claim on trust.

VerbaPulse is not an archiving system and does not satisfy books-and-records obligations on its own. See Pre-Send vs Post-Send.

Generate a pack from your own period

Book a demo →
FAQ

Common questions

What is in the pack?
The period covered, volume analyzed, risk by category, severity distribution, and resolution outcomes, presented as a PDF for a week, month or quarter.
Which controls does it map to?
ISO 27002:2022 A.5.14 Information Transfer, A.8.12 Data Leakage Prevention, and A.6.3 Security Awareness, Education and Training. The mapping document is available on request.
Does this make us certified?
No, and be skeptical of any tool that claims it does. The pack is evidence that a preventive control operated over a period. Certification is a separate audit of your whole management system.
Can we produce one for a specific quarter?
Yes. Choose the period and generate the PDF; the numbers are computed from the same event record as the dashboard.

More from VerbaPulse

Audit Trail
The exportable record behind the pack.
Analytics
The live view of the same data.
Security
How the data is handled and where it lives.