Terms

Evidence Sheet maps controls to the evidence auditors commonly ask for. It is guidance to organise your own evidence, not an audit opinion, a certification, or legal advice. Your assessor decides what is sufficient in your context.

Subscriptions renew monthly and can be cancelled at any time from the billing portal; access continues to the end of the paid period. Refunds are given on request within 30 days of any charge. We may change prices with 30 days notice to existing subscribers.

The control text and evidence guidance are our own wording. You may use them within your organisation for your own compliance work. If you are a consultant, auditor or virtual CISO, you may also use them in the client engagements you run and hand each client the sheets, exports and request packs produced for that client. The catalogue itself may not be resold, republished, or offered to others as a tool or dataset.

The service is provided as is. Our liability is limited to the fees you paid in the three months before a claim.

Accuracy. Each requirement and rule shown here is our own plain-language statement of the source it cites, not the official text. We work to keep it accurate and current, but frameworks and laws change and a summary can miss detail: check every line against the official text and take professional advice before you rely on it for an audit, a contract or a regulatory decision.

Trademarks and copyright. The names of the frameworks and standards cited here are used only to identify the source each line cites. They and any trademarks in them belong to their owners, including the Australian Signals Directorate, APRA, Amazon Web Services, Microsoft, the German Federal Office for Information Security (BSI), the California Privacy Protection Agency, the Center for Internet Security, the US Department of Defense, the Cloud Security Alliance, the European Commission, the US General Services Administration, the US Department of Health and Human Services, ISO, the IEC, NIST, the PCI Security Standards Council, the AICPA, the NCSC and IASME. The standards and laws are not reproduced here; the official texts remain with their owners and publishers. The wording, evidence lists and links on this site are copyright The Art of Service Pty Ltd.

Australian Consumer Law and liability. Nothing in these terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law (Competition and Consumer Act 2010 (Cth), Schedule 2) that cannot lawfully be excluded, including the consumer guarantees for services. Subject to that, the site is provided as is and, to the extent the law allows, we are not liable for a decision taken on the strength of it. Where our liability for a failure to comply with a consumer guarantee can lawfully be limited, it is limited to supplying the service again or refunding what you paid for it.

Governing law. These terms are governed by the law of Queensland, Australia.

Operated by The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001, Australia. support@theartofservice.comPhotograph Vitaly Gariev, Pexels