Coverage gaps
What your evidence library cannot answer yet. Each gap is a document you have not written, not a limitation of the model.
78%of a standard 280-question set is answerable from your evidence (218 questions)
AI model inventory and governance
14 unanswerede.g. “Do you maintain a documented inventory of all AI/ML models used in the product?”
Closing this needs a AI Governance Policy — likely owned by Dhanush Singh.
Business continuity testing
11 unanswerede.g. “When was your last documented disaster recovery test and what were the results?”
Closing this needs a BCDR test report — likely owned by Arun Rao.
Secure development lifecycle
9 unanswerede.g. “Describe your SDLC, including code review and security testing requirements.”
Closing this needs a Secure Development Policy — no obvious owner.
Physical and personnel security
8 unanswerede.g. “Are background checks performed on employees with access to customer data?”
Closing this needs a Personnel Security Policy — no obvious owner.