Audit and Evidence

Purpose

Audit evidence allows the company to demonstrate that delivery was controlled, secure, and compliant.

Evidence Types

Evidence may include:

• contracts

• Statements of Work

• approvals

• meeting records

• decision logs

• change records

• risk logs

• test evidence

• security records

• acceptance records

• access records

• release records

Evidence Standards

Evidence should be:

• dated

• attributable

• complete

• stored in an approved location

• linked to the relevant deliverable or control

• retained according to the applicable requirement