Client and contract
The relationship that gives the requirement its meaning.
Home / Method and evidence
Method and evidence
European assurance register
The European assurance register organises knowledge by the commitment made to each European client, not solely by framework.
Question addressed
Maintain commitments per European client, not just per framework.
The question that decides a renewal is not "are we compliant with ISO 27001?" but "what can we support in front of Client A?". Tracking organised solely by framework cannot answer that. The assurance register, by contrast, organises knowledge by European client, then by commitment made to that client. Each commitment carries its 4P trail, its evidence, its owner, its exceptions and its next deadline.
In practice, the register becomes the single place where you know what was promised, to whom, on what basis, and what still supports it today. When a questionnaire arrives, you start from what already exists instead of starting from scratch; when a piece of evidence expires, the commitments concerned are flagged; when an audit is announced, the file already exists.
Memory per client engagement
The register starts from the contract and works down to the evidence, the gap and the deadline.
Commitment
The exact response or clause to be maintained.
Support
4P, evidence, exceptions and level of verification.
Horizon
Remediation, residual risk and next deadline.
Decision enabledAt any moment, you know what has been promised to each European client — and what still proves it.
Reading a conclusion
Trace the decision behind each engagement
The register does not simply juxtapose controls. It makes it possible to trace back from a clause or a client response to its current evidence, its exception, its owner and its next deadline, and then to see which relationships are affected by a change.
The summary view remains derived from the detailed commitments; it does not create a parallel status that cannot be reconciled.
Starting questionMaintain commitments per European client, not just per framework.
- 01Client and contract
- 02Requirement, response and promise
- 034P, evidence and verification
Implementation
Build a record that follows each client.
- Client and contract
- Requirement, response and promise
- 4P, evidence and verification
- Exception, remediation and next deadline
01
Record the commitment at source
Each questionnaire response, accepted clause or written statement enters the register with its exact origin: document, version, question and date.
02
Link to the 4Ps and to evidence
The commitment points to the policy, the observed practice, the platform reality and the evidence supporting it — along with their level of verification.
03
Track exceptions and remediations
A partially supported commitment carries its documented exception and its assigned remediation. The status evolves with the facts, not with intentions.
04
Anticipate deadlines
Evidence expiries, audits, renewals and reviews feed a single calendar. Emergencies become rare because they become visible early.
Terms of use
The governance choices that keep the register usable.
They determine who can amend a commitment, accept an exception and confirm that a piece of evidence still supports the client relationship.
How is this different from our GRC tool?
Your GRC tool organises controls by framework. The assurance register organises commitments by client: this is the view that's missing at renewal, during a client audit, or when negotiating an annex. The two can coexist without duplication.
Who feeds the register?
During an engagement, iKNSA. In steady state, your teams with defined roles, or iKNSA on a recurring basis. Each entry remains attributed and dated.
Can we get out of it?
Yes, fully: the register can be exported in open formats, documents included. Reversibility is part of the contract.
Continue reading
Track a commitment from the contract through to its next milestone.
The demonstration view makes it possible to follow an engagement from the contract through to its current evidence and its next decision.