SAF Assessment & Evidence

The SAF (Security Assessment Framework) workflow: parse the control set into questions, answer each from evidence you upload, cite the source, flag the gaps, and export.

FR	What it is
FR15	SAF controls as structured input (one control = one question)
FR16	Accept uploaded evidence (PDF, DOCX, XLSX…)
FR18	Search evidence per control, keep relevant passages
FR19	Map each control to evidence (document / section / page)
FR20	Flag controls with no evidence as gaps
FR21	Assign high / medium / low confidence to each mapping
FR22	Export the evidence mapping

FR15 · SAF controls as structured input

1

Upload the SAF control list as a questionnaire.

2

Wait for each control to become one row / question.

Each control becomes one row in the Response Canvas — Question / Response / Evidence.

3

Use those rows as the checklist for the assessment.

Demo — working through the assessment in the Response Canvas.

FR16 · Accept uploaded evidence

1

Open the Document Hub.

2

Upload files such as PDF, Word (DOCX), or Excel (XLSX).

Demo — uploading evidence documents into the Document Hub.

3

Wait until processing finishes.

FR18 · Search evidence per control

1

Open the SAF questionnaire in the workspace.

2

Ask Tredy to answer using the Document Hub.

Each control answered from your evidence, with the cited source alongside.

3

Review the passages it found for each control.

FR19 · Map each control to its evidence

1

Answer each control.

2

Check the citation: document name, section, and page.

Each answer carries numbered citations back to the exact source document and passage.

3

Keep this for audit traceability.

4

Include citations when you export.

FR20 · Flag controls with no evidence as gaps

1

Filter Unanswered / gaps.

Controls with no supporting evidence stand out as gaps in the Canvas.

2

Review the flagged gaps.

Demo — the gaps and status chart across controls.

3

Add more documents or assign someone to fix the gaps.

4

Re-run analysis.

FR21 · Confidence level on each mapping

1

After analysis, look at the confidence badge on each answer.

Each answer carries a High / Medium / Low confidence level you can review and adjust.

2

Review Low and Medium items first.

Demo — confidence distribution across the assessment.

3

Use the approval queue before final submit.

FR22 · Export the evidence mapping

1

Open Export & Compliance (or Export).

Demo — opening the export for the response set.

2

Choose Excel, Word, PDF, or CSV.

3

Turn on Include evidence if needed.

4

Download the file and share it.

The exported mapping — a shareable, citation-backed report.

Demo — downloading the exported response file.