Help
93 Compliance
How 93 Compliance works: the ideas behind it, and where each thing lives on screen. Screens show Fernhollow Health, a made-up company we use for demos.
Getting started
How it fits together
Requirements lead to policies, policies to procedures, procedures to evidence, and everything to the record your auditor reads.
Create your company
Make an account, name your company, and say what brought you here; you start in the right place.
Who’s who: owner, administrators, employees, auditors
Four kinds of people, plus per-document owners, maintainers and contributors.
The Overview
Where the company stands this period: who’s complete, who’s overdue, and what everyone must do.
Concepts
Policies, drafts and versions
Drafts are worked on in the builder; publishing makes a numbered version that employees learn and auditors see.
Requirements and frameworks
Your list of what policies must handle: from standards, a customer’s questionnaire, your own risk register, or suggestions.
Risk tests
Check every risk and requirement against your documents, the way an auditor would, and fix what’s missing.
Controls and the control matrix
For each requirement: the policy that covers it, the procedures that carry it out, and their runs in the period.
Procedures, runs, steps and evidence
A procedure starts on an event, hands steps to roles, checks them, and keeps the proof.
Training: listening, acknowledging, study games
What employees must do each period, how soon, and which audiobook formats count.
Vendors and systems
Who handles your data and what you run, with owners, review dates and access checks: both lists auditors ask for.
Customer security questionnaires
Answer a customer’s questionnaire from your own policies, then test your policies against it.
Discovery: your website and how you work
Give the assistant your website and real documents first, so policies describe what you actually do.
“How we really do it” reports
When the written way and the real way drift apart, anyone can say so, and the document’s owner decides.
For owners and administrators
The policy builder
Three panes: the assistant, your documents, and the document you’re working on with tracked changes.
Set up procedures
Write a procedure, give steps to roles, choose how runs start, and let other systems start them.
Invite and manage employees
Add people one per line or by CSV; follow each person’s listening, games and acknowledgements.
The training report
Everyone’s status for a period, policy by policy: how much they heard and when they acknowledged it.
For employees
For auditors
Give an auditor access
Set the audit period, invite your auditor read-only, and download the package.
The audit portal
What an auditor sees: controls, policies, training, procedure runs, risks, vendors and systems, read-only.
What’s in the audit package
One zip for the period, with an index page that links everything.