Usually, no. Type 1 is about whether your controls are designed correctly on a specific date. That is a smaller job than people think.
Write down the controls, the owners, and the evidence you will show.
Shared accounts, stale collaborators, missing MFA, and weak branch protection are the usual pain points.
One folder with policies, exports, and review notes beats an expensive dashboard nobody maintained.
If you want the first structured version of that system, start with the free pack or go straight to the full toolkit.