Auditor certification

Joopler Certified Auditor is a free, open program that teaches an external auditor how to run an audit against Joopler's continuous, independently verifiable evidence. It is open to any auditor, needs no Joopler account, and ends in a credential anyone can verify.

This page is for auditors. If you are a company that wants to give your auditor scoped access to your program, see Auditor portal instead.

What it covers

The certification is four short modules, about 30 minutes in total, each ending in a comprehension check:

1. Continuous compliance on Joopler - how evidence is collected automatically and continuously rather than assembled once a year.
2. The auditor portal and audit windows - how read-only, time-boxed, logged access works and how the request-and-fulfill workflow runs.
3. Verifiable evidence: signatures, timestamps, and the ledger - how to independently verify a signature and read the hash-chained ledger.
4. Frameworks, the OSCAL crosswalk, and reporting - how one control maps across frameworks and travels to your tooling as OSCAL.

How to get certified

1. Go to Become a Joopler Certified Auditor and start the certification. Enter your work email (and optionally your name and firm). Your email is how progress is tracked and the credential is issued - there is no account to create.
2. Work through each module and pass its comprehension check. You must answer every question correctly to complete a module, and you can retake a check as many times as you need.
3. When all four modules are complete, your Joopler Certified Auditor credential is issued automatically. It is valid for two years.

Your progress is tied to your email, so you can leave and come back to finish later.

Your credential

Each credential has its own verifiable page. From it you can:

• Download a PDF of the credential.
• Confirm it is authentic: the page recomputes the credential's digest and, when the credential is countersigned by a key, verifies that signature. A forged or altered credential fails this check.

The verification page also shows whether the credential is currently valid, revoked, or expired.

The public directory

Certified auditors can be listed in the public Certified auditors directory, so companies can find you and confirm your credential. After your credential is issued, you receive a confirmation email; confirming ownership lists you in the directory. Only confirmed, unrevoked, and unexpired credentials appear, and each entry links to its verifiable page.

Are you an audit firm?

Beyond individual certification, assurance firms can join the Joopler audit-partner program to be recommended to companies preparing for their audit. See the audit-partner program on joopler.com.