Skip to content

Auditor question bank

The Auditor question bank is a browsable, filterable library of the questions an auditor typically asks when testing a control — the “show me…”, “walk me through…”, and “how often…” prompts you’ll hear in an interview. Every question is tied to a real control and the framework clauses that control satisfies, so you can rehearse before an audit and see exactly what each answer needs to cover. Find it under Auditor question bank in the sidebar, in the Audits & improvement section.

Filter the bank by:

  • Framework — show only the questions whose control maps to a framework you’re pursuing (for example ISO/IEC 27001 or SOC 2). The count next to each framework is how many questions touch it.
  • Domain — a framework-neutral grouping such as Access Control or Resilience & Continuity.
  • Search — free text across the question and its control name.

Questions are grouped by control, and each one shows the frameworks and clause references it maps to, so you can trace a question straight back to the requirements it evidences. Use View control to jump to that control’s page, where the same questions appear under What an auditor will ask alongside its linked evidence.

For any question, Draft grounded answer asks Keel to draft a suggested answer — grounded only in your own controls, policies, and evidence metadata, with source citations so you can see exactly what each answer is based on. Keel abstains and tells you what’s still missing rather than inventing a capability you can’t evidence. Drafts are yours to review; they’re a starting point, not a final answer.