Initial commit

06-audit-and-review/audit-and-review-evidence-log-template.md

@@ -0,0 +1,63 @@
+Title: Audit and Review Evidence Log Template
+Document ID: [REVIEW-EVIDENCE-001]
+Version: 0.1 Draft
+Status: Draft
+Owner: CISO (Paul Jenkins)
+Approver: CISO (Paul Jenkins)
+Classification: Internal
+Effective date: [DD Month YYYY]
+Review date: [DD Month YYYY]
+
+# Audit And Review Evidence Log Template
+
+## Purpose
+
+This template provides a simple log for tracking evidence collected or referenced during audit and management review activity.
+
+## Scope
+
+This log applies to evidence used in internal audits, management reviews, control reviews, and follow-up assurance activity.
+
+## Data Fields / Expected Columns
+
+The log should record at least:
+
+- evidence reference
+- activity type
+- related audit or review
+- evidence description
+- source location
+- owner
+- date collected or reviewed
+- reviewer
+- notes
+
+## Ownership
+
+This log should be owned by CISO (Paul Jenkins) or a delegated assurance coordinator.
+
+## Update Frequency
+
+The log should be updated as evidence is requested, reviewed, or added to an audit or review pack.
+
+## Retention
+
+Completed logs should be retained with the associated audit or review records in line with retention requirements.
+
+## Template Table
+
+| Evidence Reference | Activity Type | Related Audit / Review | Evidence Description | Source Location | Owner | Date Collected / Reviewed | Reviewer | Notes |
+| --- | --- | --- | --- | --- | --- | --- | --- | --- |
+| [EV-001] | [Audit / Management Review / Control Review] | [Reference] | [Description] | [Path / system / link reference] | [Role] | [DD Month YYYY] | [Name / Role] | [Notes] |
+
+## Related Documents
+
+- Internal Audit Procedure
+- Management Review Procedure
+- Evidence and Audit Readiness Guidance
+
+## Version Control
+
+| Version | Date | Description of Change | Author |
+| --- | --- | --- | --- |
+| 0.1 Draft | [DD Month YYYY] | Initial draft. | [Name or Role] |