Arrakis Practice AuditAnswer control-referenced interview questions across six frameworks at once. Conditional follow-ups probe exactly like an assessor, and every response rolls up into a graded readiness picture for your organisation.
Every question cites the exact controls it satisfies — an access review answer scores SOC 2 CC6.2, ISO 27001 A.5.18, CMMC AC.L2-3.1.5 and PCI DSS 7.2.4 at once.
Say yes and the interview digs deeper. Say no and it stops asking — the gap is recorded and scored instead of padded with questions.
Weighted percentage with an A–F grade per framework, plus a 1–5 maturity level for every control domain so you know where to spend the next quarter.
Each company works in its own space, picks the frameworks it cares about, and never sees another tenant's responses.
Respondents answer for their own domain, auditors review only their assigned companies, super admins run the programme.
Add a framework, review the suggested mappings from the existing question bank, and author only the questions that are genuinely new.