Federated control evidence proves coverage by connecting process documentation and live cloud facts to the same control model. The evidence can stay in authoritative systems, but its source, scope, capture time, owner, validity, and review state must be visible in one assurance graph.
Process documentation supports audit evidence when each control claim connects to an approved procedure, accountable owner, effective version, operating records, and reviewer conclusion. Creately Process models how the control should operate. Creately Compass connects that model to requirements, controls, live evidence, exceptions, and review decisions.