Prepare for an audit | Retivo Docs

Auditors working to ISO 27001, PCI DSS, NIS2 or an internal policy usually ask for the same evidence about the network. This page lists each item and where to get it.

Note

Retivo does not certify anything. It keeps the evidence current so you can hand it over quickly.

Evidence checklist

Auditor asks for	Where in Retivo	How to export
A list of network devices with model, serial and software version	Inventory > Export	Excel, choose the columns
Proof that configs are backed up	Config backups (last backup and stored copies per device)	Status report, or screenshots of the page
What changed, when and by whom	Audit log, filtered by area and time	Excel, PDF or CSV
Change history of a device's configuration	Device page, versions and compare	Download any version
Insecure services disabled (Telnet, HTTP)	Compliance page	Status report
Required settings present (NTP, syslog, AAA)	Config rules on Compliance	Status report
Known vulnerabilities and remediation plan	Vulnerabilities, with the upgrades table	Excel or PDF, per CVE or per device
Unsupported software or hardware	Upgrades and end of life table	Excel or PDF
A current network diagram	Topology > Export PDF	PDF with the map and every device's links
Who has access to what	Settings > Users and Roles; sign-in method on dash.retivo.net	Audit log of sign-ins

A month before the audit

Run the compliance checks and fix what fails.
Filter Vulnerabilities to Exploited in the wild and Critical, and plan or finish those upgrades.
Look at the end of life table for anything already out of support.
Make sure every device has a recent backup (filter Config backups by last backup).

The week of the audit

Export the inventory, the vulnerability list (per device) and the audit log for the audit period.
Export the topology PDF.
Open the status report and save it as PDF from the browser.

What's next

Schedule status reports so this evidence arrives every month on its own.