Frameworks
A framework is the standard you assess against — a regulator's control set, an
Compliance programmes
A programme is the long-lived container for one framework's assessment
Running an assessment
An engagement is one assessment of one framework over a period. This is the
Sign-off
Sign-off is what turns an opinion into an audit record. The chain has three
Findings and remediation
A finding is a control that fell short, written down so somebody can fix it.
Gap analysis and snapshots
Grading a control tells you where you are. Gap analysis tells you how far that
Reporting
Everything Vantage reports is computed once, in one place, and read by every