Critical or important functions
Scope services, assets, suppliers and controls with MTPD, RTO and RPO for the relevant functions.
Operational registers
Prepare for resilience and record what actually happens.
AuditReady separates exercises from operational incidents: both generate learning, findings and evidence, but they remain two separate registers.
Running a simulation
Steps, timeline, deadlines and produced material stay tracked for every resilience exercise.
What it includes
Tests and simulations
Record resilience tests, disaster recovery, backup/restore, penetration tests and reusable tabletop scenarios, with PDF or JSON export per run.
Operational incidents
Keep a register of impact, severity, affected services, root cause and status, with notification stages for DORA, NIS2, GDPR or AI Act profiles.
Always kept separate
A real incident and a simulation remain separate registers, even though both can generate findings and evidence.
How it works
Scope the critical functions
Define MTPD, RTO, RPO and links to systems, assets and suppliers.
Plan tests and simulations
Organise tabletop scenarios, disaster recovery, backup/restore and penetration tests.
Execute and track
Follow the steps, timeline and any gaps that emerge during the run.
Record real incidents
Track severity, root cause, notification stage and status, kept separate from exercises.
Connects with
A risk register connected to your controls.
Assess likelihood and impact before and after controls, assign a treatment and bring the rationale and available evidence into review.
ExploreEvidence that retains context, integrity and review status.
An operational repository for documents and proof: not an isolated archive, but the connection point between a control, policy, supplier, audit and register.
ExploreMake your compliance scope explicit and reviewable.
From entity profiling to board attestations, from policies to assets: AuditReady connects the elements that define the scope you need to govern.
ExploreFrequently asked questions
Do an incident and a simulation share the same register?
No, they remain two separate registers, even though they can generate shared findings and evidence.
Can I export the outcome of a simulation?
Yes, every run can be exported as PDF or JSON with steps, timeline and identified gaps.
Do incidents support multiple regulatory profiles?
Yes, an operational incident can be classified under a DORA, NIS2, GDPR, AI Act, or other profile.