The same controls, reassessed three times — once for the regulator, once for SOC 2, once for the board — is three chances to contradict yourself. CyberSentien flips it: one assessment run is the single source of truth, and every deliverable renders from it.
Evidence is fingerprinted on arrival. The AI's role is narrow and honest — it helps match evidence to controls, assistive not authoritative, running locally. The verdict itself is deterministic: same evidence, same result, every time.
One run, every deliverable
🛡 Consultant-grade ISM / IRAP report
The deepest output we build: per-control evidence chains, assessor-style rationale, SAR structure, hash-chained sign-off ledger. Where we go deepest — Australia's ISM and Essential Eight.
📄 SOC 2 / ISO 27001 readiness & framework reports
Switch the output, not the assessment: the identical verdicts render each framework's report (a readiness / crosswalk view for ISO 27001 and SOC 2). You re-rendered — you didn't re-assess.
📊 Board & regulator packs
The executive view drawn from the very same numbers, so the board sees exactly what the auditor sees. No drift.
Honest by construction
No false green
Verdicts are measured against the FULL catalogue. Controls without evidence read “manual assessment required” — an honest gap, never a fabricated pass.
Deterministic verdicts
Same evidence, same result — no model roulette deciding your posture. The AI assists with matching; it never decides a verdict.
Evidence lineage
Every report traces each section to the controls and evidence it rests on, sealed with a SHA-256 anchor in a tamper-evident ledger.
Connectors — honest depth on every one
62 connectors registered — Microsoft 365 is the deep, real connection today; every other connector carries its real lifecycle status straight from the engine's registry — configured, ready, or available — and nothing is badged live until data has actually been pulled. No faked live monitoring, by design.
Evidence uploads work everywhere regardless: policies, registers, exports and reports feed the same assessment spine as connector signals.
Watch one run become three deliverables
Run the engine on synthetic sample docs and open the ISM report, the framework report and the board pack from the same run id.