For each control, complete all fields. Set the Maturity level (0–5), select the Compliance Status, record where evidence is held, the control owner, and any finding or gap with a recommended corrective action and target date. For N/A controls, justify the exclusion in the Evidence field.